Security Advisory

CVE-2006-4576

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-01-03 20:00:00
Last updated 2024-08-07 19:14:47
Assigner flexera
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary web script or HTML by uploading the HTML file with a GIF or JPG extension, which is rendered by Internet Explorer.