Armorize-ADV-2006-0005 discloses multiple cross-site scripting vulnerabilities that are found in Gcontact, which is a Web based address book written in Ajax/PHP offering multi-user, multi-contacts (email,phone,icq,msn, ) & multi-address for each person, birthday reminder by email, mailing-list management, Excel export, etc.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51141/Armorize-ADV-2006-0005.txt
Source: https://packetstormsecurity.com/files/51141/Armorize-ADV-2006-0005.txt.html