Description
Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities.
References
- 20020725 ezContents multiple vulnerabilities mailing-list
- 20020725 [VulnWatch] ezContents multiple vulnerabilities mailing-list
- ezcontents-diary-entry-xss(9712) vdb-entry