CVE-2006-4362

CVE-2006-4362 describes a cross-site scripting (XSS) vulnerability in getad.php of Diesel Paid Mail, enabling remote attackers to inject arbitrary script/HTML via the ps parameter. The NVD entry assigns a base CVSS2 score of 4.3 (Medium) with network attack vector, no confidentiality or availabil...