Description
Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
References
- ADV-2006-2505 vdb-entry
- 20776 third-party-advisory
- 18618 vdb-entry
- vlbook-index-xss(27333) vdb-entry
- 20060623 vlbook 1.2 XSS Bug mailing-list
- http://colander.altervista.org/advisory/vlbook.txt
- 1016379 vdb-entry
- 1150 third-party-advisory