Unscored CVE-2006-6278 EUVD-2006-6261GHSA-8632-w7w8-w55j

Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitrary web script or HTM…

Published Dec 4, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

References

ADV-2006-4807 vdb-entry
1964 third-party-advisory
21373 vdb-entry
23181 third-party-advisory
@lexguestbook-index-xss(30639) vdb-entry
20061130 @lex Guestbook 4.0.1 : Full Path Disclosure & XSS mailing-list