Description
Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.
References
- 14749 third-party-advisory
- 20050329 Multiple sql injection, and xss vulnerabilities in PortalApp mailing-list
- 1013591 vdb-entry
- http://icis.digitalparadox.org/~dcrab/portalapp.txt
- 12936 vdb-entry
- portalapp-contentasp-xss(19891) vdb-entry