CVE-2006-3155

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in a emailtofriend.pl or b violation.pl, 2 seller parameter in c vsoa.pl, 3 user parameter in d userask.pl or e leavefeed.pl...

CVE-2006-3155

This CVE (CVE-2006-3155) affects Ultimate Auction 1.0 and earlier. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via user-controlled input parameters in several scripts: (1) item parameter in emailtofrien...