CVE-2007-2203

Description

Cross-site scripting (XSS) vulnerability in Big Blue Guestbook allows remote attackers to inject arbitrary web script or HTML via the message field in the guestbook entry submission form.

Affected products

• big_blue / guestbook

References

• MISChttp://www.securityfocus.com/archive/1/466693/100/0/threaded
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/1518
• MISChttp://www.securityfocus.com/bid/23591
• VENDOR_ADVISORYhttp://secunia.com/advisories/24997
• MISChttp://osvdb.org/35313