Description
Cross-site scripting (XSS) vulnerability in index.php in myPHP Guestbook 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
References
- myphpguestbook-index-xss(27074) vdb-entry
- ADV-2006-2308 vdb-entry
- 20572 third-party-advisory
- 1110 third-party-advisory
- 20060609 myPHP Guestbook 2.0.2 XSS Vulnerabilitie mailing-list