Description
Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script or HTML via the comment parameter.
References
- iwebnegar-comments-xss(28663) vdb-entry
- 1476 third-party-advisory
- 20060830 IwebNegar v1.1 Multiple vulnerabilities mailing-list