Description
Cross-site scripting (XSS) vulnerability in the banner engine (TBE) 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability.
References
- tbe-xss(14911) vdb-entry
- 20040122 TBE - the banner engine server-side script execution vulnerability mailing-list
- 9472 vdb-entry