Description
Multiple cross-site scripting (XSS) vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data.
References
- http://sourceforge.net/forum/forum.php?forum_id=356882
- 9801 vdb-entry
- 11028 third-party-advisory
- sandsurfer-xss(15377) vdb-entry
- 4132 vdb-entry