Description
Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the ma_kw parameter.
References
- 1006308 vdb-entry
- 7127 vdb-entry
- 20030317 [SCSA-010] Path Disclosure & Cross Site Scripting Vulnerability in MyABraCaDaWeb mailing-list
- http://www.webmaster-mag.net/?module=distridoc&idCat=3
- myabracadaweb-index-makw-xss(11557) vdb-entry
- http://www.security-corporation.com/download/patch/MyABraCaDaWebv1.0.2XSSpatch.zip
- 3717 third-party-advisory
- 8320 third-party-advisory