Description
Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:P/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/18372Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=384153&group_id=51417Patch
- http://sourceforge.net/tracker/index.php?func=detail&aid=1395371&group_id=51417&atid=463213
- http://www.vupen.com/english/advisories/2006/0126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24053
- http://secunia.com/advisories/18372Patch, Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=384153&group_id=51417Patch
- http://sourceforge.net/tracker/index.php?func=detail&aid=1395371&group_id=51417&atid=463213
- http://www.vupen.com/english/advisories/2006/0126
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24053
Timeline
- Published
- Jan 11, 2006
- Last modified
- Jun 16, 2026
- NVD status
- Modified