Description
Cross-site scripting (XSS) vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
References
- 47419 third-party-advisory
- tinyguestbook-msg-xss(72075) vdb-entry
- 51248 vdb-entry
- http://code.google.com/p/tinyguestbook/issues/detail?id=1
- 20120103 Tinyguestbook XSS mailing-list