CVE-2006-1580

CVE-2006-1580 describes multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions. The attack vectors are the msg parameter in query.jsp and the entryId parameter in edit.jsp, enabling remote attackers to inject arbitrary web script or HTML. The entry does not provid...