CVE-2006-0149 Information

Description

Cross-site scripting (XSS) vulnerability in SimpBook 1.0 with html_enable on (the default) allows remote attackers to inject arbitrary web script or HTML via the message field.

Reference

http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041127.html http://securitytracker.com/id?1015451