CVE-2006-2287

Multiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the fields in a user’s profile.

Date published : 2006-05-09

http://www.securityfocus.com/bid/17867

http://www.securityfocus.com/archive/1/433129/100/0/threaded