CVE-2006-3004

Ez Ringtone Manager contains multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The flaws are triggered via (1) the id parameter in player.php and (2) the keyword parameter used in search functionality. Impact is described as en...