Description
Cross-site scripting (XSS) vulnerability in index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the message parameter.
References
- http://vegadns.org/src/current/CHANGELOG
- http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt
- 14538 vdb-entry
- 16370 third-party-advisory