CVE-2006-2699

Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action.

Date published : 2006-05-31

http://www.securityfocus.com/bid/18154

http://www.securityfocus.com/archive/1/435295/100/0/threaded