CVE-2006-0194

CVE-2006-0194 is an XSS vulnerability in FogBugz 4.029 and earlier versions up to 4.0.32/4.0.33 (per the 4.0.33 release notes). The flaw allows remote attackers to inject arbitrary script/HTML via the dest parameter on the pgLogon page. Affected product/component: FogBugz web application (default...