Description
Cross-site scripting (XSS) vulnerability in account.html in Adaptive Website Framework (AWF) 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.
References
- 21914 vdb-entry
- 15937 vdb-entry
- http://pridels0.blogspot.com/2005/12/awf-adaptive-website-framework-vuln.html
- http://www.awf-cms.org/news.html
- ADV-2005-2973 vdb-entry