Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to group.php, or the 2 targetlanguage or 3 targetflag parameter to translate.php...

PT-2012-4349

Name of the Vulnerable Software and Affected Versions PHP Address Book versions 7.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PATH INFO to "group.php", or the target language or target flag parameter to...