Saphplesson · Saphplesson · CVE-2006-1720
Name of the Vulnerable Software and Affected Versions:
SaphpLesson version 3.0
Description:
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `Word` parameter in the "search.php" file. It is noted that this issue might be a result of SQL injection.
Recommendations:
For SaphpLesson version 3.0, consider restricting access to the `search.php` file or validating and sanitizing the `Word` parameter to prevent arbitrary script injection until a proper fix is available.