CVE-2006-6769

CVE-2006-6769 applies to PHP Live! 3.2.2 and earlier, with multiple XSS flaws. Vulnerable components/files include transcripts.php (search_string parameter), index.php (l parameter), phplive/index.php (login field), and phplive/message_box.php (deptid and x parameters). Exploits describe arbitrar...

CVE-2006-6769: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchstring parameter in a setup/transcripts.php, the 2 l parameter in b index.php, the 3 login field in c phplive/index.php, and the 4 deptid...