CVE-2006-6148

CVE-2006-6148 involves multiple reflected cross-site scripting (XSS) vulnerabilities in the submitlink.asp component of JiRos Links Manager. The flaws allow remote attackers to inject arbitrary web script or HTML via the affected parameters lName, lURL, lImage, and lDescription, enabling potentia...

CVE-2006-6148: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the 1 lName, 2 lURL, 3 lImage, and 4 lDescription parameters. NOTE: some of these details are obtained from third party information...