Unscored CVE-2006-4088 EUVD-2006-4080GHSA-4cg6-wj96-p2cj

Multiple cross-site scripting (XSS) vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via t…

Published Aug 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Subject, (2) Comment, and (3) Add new comment sections.

References

19438 vdb-entry
1357 third-party-advisory
20060809 CivicSpace Version 0.8.5 HTML injection mailing-list
civicspace-subject-comment-xss(28303) vdb-entry