Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag.

BID:5728 | URL:http://www.securityfocus.com/bid/5728 | BUGTRAQ:20020914 Lycos HTMLGear Guestbook Script Injection Vulnerability | URL:http://archives.neohapsis.com/archives/bugtraq/2002-09/0198.html | VULNWATCH:20020926 [VulnWatch] BugTraq ID: 5728 | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0132.html | XF:guestgear-img-xss(12235) | URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/12235