Unscored CVE-2006-2536 EUVD-2006-2536GHSA-98wm-5w43-v9m3

Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via …

Published May 22, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Destiney Links Script 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) "Search" (term parameter in index.php) and (2) "Add a Site" (add.php) fields.

References

20060521 Destiney Links Script v2.1.2 mailing-list
18071 vdb-entry
937 third-party-advisory
20248 third-party-advisory
ADV-2006-1933 vdb-entry
destineyls-multiple-xss(26612) vdb-entry