Secunia
Login
|
|
CVE Reference: CVE-2006-3327 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-3327 |
|
|
Description: Cross-site scripting (XSS) vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) sn20_special_cases parameter ("Special Cases" field) in profile/mini.php, (2) tyxx01_album_name parameter ("Album Name" field) in profile/photo_create.php, and the (3) u parameter in admin/user_view.php. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/27398 http://xforce.iss.net/xforce/xfdb/27399 SAID Secunia Advisory: SA20839 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=115109990800428&w=2 BID 18626 |
|
| Return to the previous page. |
