Description
Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.
References
- ADV-2006-0524 vdb-entry
- http://www.evuln.com/vulns/69/summary.html
- timetracking-registration-xss(24572) vdb-entry
- 16630 vdb-entry
- 20060219 [eVuln] Time Tracking Software Multiple Vulnerabilities mailing-list
- 18854 third-party-advisory