Description
Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the (1) Handle or (2) Message fields.
References
- 20060209 [eVuln] Unknown Domain Shoutbox multiple XSS & SQL Injection Vulnerabilities mailing-list
- ADV-2006-0476 vdb-entry
- 16543 vdb-entry
- shoutbox-multiple-xss(24440) vdb-entry
- 18759 third-party-advisory
- http://evuln.com/vulns/55/summary.html