Description
Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header field.
References
- ADV-2005-1617 vdb-entry
- 16668 third-party-advisory
- http://gbook.sourceforge.net/sec/14725
- 19144 vdb-entry
- 14725 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=353531
- 20060220 More info: gBook Multiple Unspecified Cross-Site Scripting Vulnerabilities mailing-list
- gbook-unknown-xss(22114) vdb-entry