Unscored CVE-2006-1720 EUVD-2006-1720GHSA-2vmm-25vj-5925

Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML vi…

Published Apr 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via the Word parameter. NOTE: it is possible that this issue is resultant from SQL injection.

References

20060407 Xss In SaphpLesson3.0 mailing-list
683 third-party-advisory
17414 vdb-entry
ADV-2006-1317 vdb-entry
1015883 vdb-entry
saphplesson-search-xss(25719) vdb-entry