Description
Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username field during the registration of a new account. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- 22913 vdb-entry
- ADV-2006-0438 vdb-entry
- 18721 third-party-advisory
- papoo-username-xss(24500) vdb-entry