Unscored CVE-2006-2632 EUVD-2006-2631GHSA-9j7x-7chg-xmgx

Cross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to inject arbitrary w…

Published May 30, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via file descriptions.

References

ADV-2006-2033 vdb-entry
18136 vdb-entry
20060523 ByteHoard <= 2.1 multiple vulnerabilities mailing-list
http://sourceforge.net/forum/forum.php?forum_id=576219
20304 third-party-advisory
bytehoard-index-xss(26704) vdb-entry
968 third-party-advisory
http://sourceforge.net/project/shownotes.php?release_id=420549&group_id=90199