Cross site scripting

Cross-site scripting XSS vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via 1 the searchterms parameter to a search.php, and 2 the firstname, 3 lastname, 4 email, 5 password, and 6 confirmpassword parameters to b userinput.php. NOTE: the provenance ...

CVE-2006-1642

The CVE-2006-1642 entry describes a Cross-site Scripting (XSS) vulnerability in Interact 2.1.1. The flaw allows remote attackers to inject arbitrary web script or HTML via multiple input vectors: search_terms in search.php and first_name, last_name, email, password, and confirm_password in userin...