CVE-2006-6721 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) sbNick or (2) sbKommentar parameter.

Reference

http://secunia.com/advisories/23526 http://www.securityfocus.com/bid/21637 http://www.securityfocus.com/data/vulnerabilities/exploits/21637.html