Description
Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.
References
- 50654 vdb-entry
- 52471 vdb-entry
- maxsguestbook-index-xss(47250) vdb-entry
- maxguestbook-name-xss(74011) vdb-entry
- 20081210 Max's Guestbook (XSS) Remote Vulnerability mailing-list
- 32763 vdb-entry
- http://packetstormsecurity.org/files/110772/Maxs-Guestbook-1.0-Local-File-Inclusion-Path-Disclosure.html
- 18595 exploit
- 33106 third-party-advisory