Description
Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
References
- 650 third-party-advisory
- http://evuln.com/vulns/104/summary.html
- 23941 vdb-entry
- ADV-2006-0974 vdb-entry
- 20060318 Vendor ACK for Skull-Splitter Guestbook XSS mailing-list
- http://www.boysen.be/en/
- 20060329 [eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability mailing-list
- 19268 third-party-advisory
- 17136 vdb-entry
- skullsplitter-guestbook-xss(25293) vdb-entry