Description
Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML via the Comments field when signing the guestbook.
References
- cuteguestbook-guestbook-xss(26244) vdb-entry
- http://colander.altervista.org/advisory/CuteGuestbook.txt
- 20060504 CuteGuestbook XSS attack mailing-list
- 844 third-party-advisory
- 17832 vdb-entry