Description
Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Comment parameter.
References
- phpguestbook-script-xss(25850) vdb-entry
- 17594 vdb-entry
- 20060415 PhpGuestbook <= 1.0 XSS mailing-list
- 19669 third-party-advisory
- 17537 vdb-entry
- ADV-2006-1422 vdb-entry
- http://pridels0.blogspot.com/2006/04/phpguestbook-v10-script-insertion.html