CVE-2007-0542

Description

Cross-site scripting (XSS) vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script or HTML via the user parameter.

Affected products

• 212cafe / guestbook4.00_beta – 4.00_beta

References

• MISChttp://www.securityfocus.com/archive/1/457660/100/0/threaded
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/31663
• MISChttp://securityreason.com/securityalert/2190