Description
Cross-site scripting (XSS) vulnerability in Big Blue Guestbook allows remote attackers to inject arbitrary web script or HTML via the message field in the guestbook entry submission form.
References
- 20070423 Big Blue Guestbook HTML Injection Vulnerabilities mailing-list
- ADV-2007-1518 vdb-entry
- 23591 vdb-entry
- 24997 third-party-advisory
- 35313 vdb-entry