Unscored CVE-2006-1373 EUVD-2006-1377GHSA-7rwx-5c38-47x9

Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTM…

Published Mar 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the base_url parameter.

References

phplive-statusimage-xss(25386) vdb-entry
20060322 PHP Live! XSS status_image.php mailing-list
19340 third-party-advisory
ADV-2006-1054 vdb-entry
17184 vdb-entry