Unscored CVE-2006-2639 EUVD-2006-2638GHSA-q8rq-w642-9wpx

Cross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to injec…

Published May 30, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element.

References

phpsimplechoose-script-xss(26714) vdb-entry
971 third-party-advisory
20060524 PHPSimple Choose v0.3 mailing-list
ADV-2006-2019 vdb-entry
20306 third-party-advisory
20060601 Re: PHPSimple Choose v0.3 mailing-list