Unscored CVE-2007-2265 EUVD-2007-2260GHSA-x2c8-h488-vjrg

Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City …

Published Apr 25, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script or HTML via the City field in a sign action in index.php.

References

yabook-city-xss(33894) vdb-entry
20070424 YA Book 0.98 Persistent XSS mailing-list
35519 vdb-entry
23626 vdb-entry
2629 third-party-advisory