Multiple cross-site scripting (XSS) vulnerabilities in ASP-Programmers.com ASPKnowledgebase allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
http://secunia.com/advisories/17517 | third party advisory vendor advisory |
http://www.osvdb.org/20713 | vdb entry exploit |
http://seclists.org/lists/bugtraq/2005/Nov/0122.html | mailing list |
http://www.vupen.com/english/advisories/2005/2375 | vdb entry vendor advisory |