Description
Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL.
References
- 1013617 vdb-entry
- 14752 third-party-advisory
- http://www.hackerscenter.com/archive/view.asp?id=1807
- 12968 vdb-entry
- maxwebportal-linksaddform-xss(19929) vdb-entry