Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in codes-english.php and (2) the img parameter in picture.php, after the name of an existing file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2006-07-14T21:00:00
Updated: 2024-08-07T18:39:52.583Z
Reserved: 2006-07-14T00:00:00
Link: CVE-2006-3616
Vulnrichment
No data.
NVD
Status : Modified
Published: 2006-07-18T15:46:00.000
Modified: 2024-11-21T00:14:02.213
Link: CVE-2006-3616
Redhat
No data.