CVE-2006-3769

Multiple cross-site scripting XSS vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pass and 2 pass2 parameters in a add.php or the 3 id parameter in b members/index.php...

CVE-2006-3769

Top XL 1.1 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. The issue arises from user-supplied input in specific parameters: (1) pass and (2) pass2 in add.php, and (3) id in members/index.php. Successful exploitation would allow remote attackers to inject arbitrar...