Description
Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.
References
- 17649 third-party-advisory
- 196 third-party-advisory
- http://www.phpmyfaq.de/advisory_2005-11-18.php
- 20989 vdb-entry
- 15504 vdb-entry
- http://www.trapkit.de/advisories/TKADV2005-11-004.txt
- ADV-2005-2505 vdb-entry
- 20051119 [TKADV2005-11-004] Multiple Cross Site Scripting vulnerabilities in phpMyFAQ mailing-list