Description
Multiple cross-site scripting (XSS) vulnerabilities in WebApp Guestbook PRO 3.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content of a message.
References
- 16349 vdb-entry
- http://www.soulblack.com.ar/repo/papers/guesbookpro_advisory.txt
- 13593 vdb-entry
- 1013940 vdb-entry
- 20050511 Guesbook Pro XSS & HTML Injection mailing-list
- 15290 third-party-advisory
- webapp-php-guestbook-pro-xss(20544) vdb-entry