Description
Cross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
References
- 1015957 vdb-entry
- ADV-2006-1237 vdb-entry
- http://evuln.com/vulns/118/summary.html
- 19541 third-party-advisory
- 732 third-party-advisory
- 20060417 [eVuln] CzarNews XSS and Multiple SQL Injection Vulnerabilities mailing-list
- 24381 vdb-entry
- 17380 vdb-entry
- czarnews-news-xss(25623) vdb-entry