Description
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro 7.2 allow remote attackers to inject arbitrary web script or HTML via (1) the Err parameter in admin/index.php and the (2) firstname and (3) lastname parameters in index.php.
References
- http://myblog.it-security23.net/?postid=5
- 20891 vdb-entry
- affiliate-network-index-xss(23075) vdb-entry
- ADV-2005-2455 vdb-entry
- 20051115 Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS mailing-list
- 20892 vdb-entry
- 17605 third-party-advisory