Description
wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site scripting attacks via certain parameters (possibly "dict") to the wordtrans.php script.
References
- 5674 vdb-entry
- wordtrans-web-code-execution(10063) vdb-entry
- RHSA-2002:188 vendor-advisory
- 20020908 Guardent Client Advisory: Multiple wordtrans-web Vulnerabilities mailing-list
- http://www.guardent.com/comp_news_wordtrans-web.html#
- 5671 vdb-entry
- wordtrans-web-php-xss(10059) vdb-entry