Description
Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and (3) search.php.
References
- http://nightmaresecurity.net/index.php?showtopic=1015
- http://www.addict3d.org/index.php?page=viewarticle&type=security&ID=5359
- 1015259 vdb-entry
- ADV-2005-2581 vdb-entry
- 15567 vdb-entry
- 21092 vdb-entry
- 17736 third-party-advisory
- 21091 vdb-entry
- 21090 vdb-entry