CVE-2003-1556

Description

Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) homepage_title (webpage title) parameters.

Affected products

• cgi_city / cc_guestbook

References

• MISChttp://securityreason.com/securityalert/3796
• MISChttp://www.securityfocus.com/bid/7237
• MISChttp://www.securityfocus.com/archive/1/316764/30/25250/threaded