Description
Multiple cross-site scripting (XSS) vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the (1) version[fullname], (2) version[homepage], or (3) version[no] parameter to footer.php, or the (4) version[fullname], (5) version[no], (6) version[author], (7) version[email] parameter to header.php.
References
- 16607 third-party-advisory
- http://de-neef.net/articles.php?id=2&page=2
- http://rgod.altervista.org/lookingglass.html
- 20050827 Looking Glass v20040427 arbitrary commands execution / cross site mailing-list
- lookingglass-header-footer-xss(22044) vdb-entry
- 14680 vdb-entry