Description
Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page.
References
- http://evuln.com/vulns/22/summary.html
- 20060111 [eVuln] MyPhPim Multiple SQL Injection and XSS Vulnerabilities mailing-list
- myphpim-todo-xss(24071) vdb-entry
- 18399 third-party-advisory
- 16210 vdb-entry
- 22326 vdb-entry
- ADV-2006-0147 vdb-entry