Description
Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as other CBMS users.
References
- 4957 vdb-entry
- 20020606 CBMS: XSS and SQL Injection holes mailing-list
- cbms-php-xss(9294) vdb-entry