Description
Cross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1, (2) Pretty Guestbook 1, and (3) Smile Guestbook 1 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the pagina parameter.
References
- 20060526 Pretty Guestbook v1 mailing-list
- prettyguestbook-view-xss(26731) vdb-entry
- 20320 third-party-advisory
- 20322 third-party-advisory
- 18128 vdb-entry
- 973 third-party-advisory
- 20321 third-party-advisory
- ADV-2006-2018 vdb-entry
- ADV-2006-2016 vdb-entry
- smileguestbook-view-xss(26734) vdb-entry
- morrisguestbook-view-xss(26735) vdb-entry
- 20060526 Smile Guestbook v1 mailing-list
- ADV-2006-2017 vdb-entry
- 20060526 Morris Guestbook v1 mailing-list