CVE-2006-3260 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Affected Software

Name	Vendor	Start Version	End Version
Vlbook	Virtual_design_studios	1.0.2 (including)	1.0.2 (including)

References

http://colander.altervista.org/advisory/vlbook.txt
http://secunia.com/advisories/20776
http://securityreason.com/securityalert/1150
http://securitytracker.com/id?1016379
http://www.securityfocus.com/archive/1/438146/100/0/threaded
http://www.securityfocus.com/bid/18618
http://www.vupen.com/english/advisories/2006/2505
https://exchange.xforce.ibmcloud.com/vulnerabilities/27333
http://colander.altervista.org/advisory/vlbook.txt
http://secunia.com/advisories/20776
http://securityreason.com/securityalert/1150
http://securitytracker.com/id?1016379
http://www.securityfocus.com/archive/1/438146/100/0/threaded
http://www.securityfocus.com/bid/18618
http://www.vupen.com/english/advisories/2006/2505
https://exchange.xforce.ibmcloud.com/vulnerabilities/27333

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3260
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html