Unscored CVE-2006-4442 EUVD-2006-4430GHSA-xmx3-m3ph-wg6w

Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML via…

Published Aug 29, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML via the cat_name parameter, related to adding a category. (categories field). NOTE: some details are obtained from third party information.

References

http://wacha.ch/wiki/addressbook:changelog
19698 vdb-entry
21611 third-party-advisory
ADV-2006-3371 vdb-entry
28174 vdb-entry