Unscored CVE-2005-1231 EUVD-2005-1234GHSA-gmm7-6778-p8pr

Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitra…

Published Apr 24, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the NewTerm function in GlossaryModel.php in JAWS 0.4 allows remote attackers to inject arbitrary web script or HTML via the (1) term or (2) description.

References

20050418 XSS bug in JAWS gadget Glossary (0.4-latestbeta (beta 2)) mailing-list
13254 vdb-entry
http://www.securiteam.com/unixfocus/5RP0M0AFFS.html