Description
Cross-site scripting (XSS) vulnerability in the web interface in Soldner Secret Wars 30830 allows remote attackers to inject arbitrary web script or HTML via a user message, which is not filtered or quoted when the administrator views the server logs.
References
- 12162 vdb-entry
- 13716 third-party-advisory
- 20050104 Socket termination, format string and XSS in Soldner Secret Wars mailing-list
- soldner-secret-wars-xss(18753) vdb-entry