Description
Cross-site scripting (XSS) vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter.
References
- ADV-2006-3342 vdb-entry
- 20060912 [eVuln] Doika guestbook 'page' XSS Vulnerability mailing-list
- 21549 third-party-advisory
- 28068 vdb-entry
- http://evuln.com/vulns/134/description.html
- doikaguestbook-gbook-xss(28503) vdb-entry
- 19656 vdb-entry