Description
Cross-site scripting (XSS) vulnerability in the GetCurrentCompletePath function in phpmyvisites.php in phpMyVisites before 2.2 allows remote attackers to inject arbitrary web script or HTML via the query string.
References
- 33176 vdb-entry
- 20070211 Multiple vulnerabilities in phpMyVisites mailing-list
- 24124 third-party-advisory
- 20070211 Multiple vulnerabilities in phpMyVisites mailing-list
- ADV-2007-0566 vdb-entry
- phpmyvisites-phpmyvisites-xss(32430) vdb-entry
- 22516 vdb-entry