Description
Multiple cross-site scripting (XSS) vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) message parameter.
References
- http://packetstormsecurity.org/files/108389/ggbguestbook-xss.txt
- http://code.google.com/p/ggbook/issues/detail?id=17
- 51285 vdb-entry
- 47470 third-party-advisory
- 20120105 Ggb Guestbook - XSS Vulnerabilities mailing-list
- 78135 vdb-entry
- ggbguestbook-addsubmit-xss(72136) vdb-entry