Description
Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields.
References
- 10405 vdb-entry
- 11696 third-party-advisory
- 6410 vdb-entry
- e107-user-xss(16241) vdb-entry
- 20040522 e107 web portal user.php XSS (Cross Site Scripting) mailing-list