1 matches found
CVE-2006-3841
WebScarab is affected by an XSS flaw in its URL handling: before 20060718-1904, when used with IE 6 SP2 or Konqueror 3.5.3, it returns the requested URL in an error message without sanitizing script/HTML. This can allow remote attackers to inject arbitrary web script or HTML. The connected docume...