Unscored CVE-2006-2533 EUVD-2006-2533GHSA-6g75-734r-w5rh

Cross-site scripting (XSS) vulnerability in (1) addWeblog.php and (2) leaveComments.php in Destiney Rated Images Script 0.5.0 does not prop…

Published May 22, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in (1) addWeblog.php and (2) leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag.

References

20060521 Destiney Rated Images Script v0.5.0 - XSS Vulnv mailing-list
20249 third-party-advisory
destineyris-multiple-xss(26605) vdb-entry
ADV-2006-1927 vdb-entry
20060526 Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv mailing-list
18070 vdb-entry
940 third-party-advisory