Description
Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or HTML via certain variables when posting new messages.
References
- 20060307 [eVuln] ShoutLIVE PHP Code Execution & Multiple XSS Vulnerabilities mailing-list
- 16857 vdb-entry
- shoutlive-post-xss(24901) vdb-entry
- 19047 third-party-advisory
- 23483 vdb-entry
- 557 third-party-advisory
- ADV-2006-0755 vdb-entry
- http://evuln.com/vulns/87/summary.html