Description
Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title.
References
- 12554 vdb-entry
- http://www.redteam-pentesting.de/advisories/rt-sa-2005-007.txt
- 14294 third-party-advisory
- 20050214 Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software mailing-list