CVE-2006-3538

Multiple cross-site scripting (XSS) vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers to inject arbitrary web script or HTML via the SRC attribute of a SCRIPT element in the (1) "Your name" field and (2) "Enter Prayer Request here" field.
Configurations

Configuration 1 (hide)

cpe:2.3:a:beatificfaith:eprayer:alpha:*:*:*:*:*:*:*

History

21 Nov 2024, 00:13

Type Values Removed Values Added
References () http://www.securityfocus.com/archive/1/437269/100/0/threaded - () http://www.securityfocus.com/archive/1/437269/100/0/threaded -
References () http://www.securityfocus.com/bid/18485 - Exploit () http://www.securityfocus.com/bid/18485 - Exploit
References () http://www.youfucktard.com/xsp/eprayer1.jpg - () http://www.youfucktard.com/xsp/eprayer1.jpg -
References () http://www.youfucktard.com/xsp/eprayer2.jpg - () http://www.youfucktard.com/xsp/eprayer2.jpg -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/27162 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/27162 -

Information

Published : 2006-07-13 00:05

Updated : 2024-11-21 00:13


NVD link : CVE-2006-3538

Mitre link : CVE-2006-3538

CVE.ORG link : CVE-2006-3538


JSON object : View

Products Affected

beatificfaith

  • eprayer