Description
Multiple cross-site scripting (XSS) vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) email, and (3) url parameter.
References
- 2005commentsscript-kommentar-xss(26318) vdb-entry
- http://d4igoro.blogspot.com/2006/05/c2005-comments-script-xss.html
- 19996 third-party-advisory
- ADV-2006-1706 vdb-entry
- 17895 vdb-entry