Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list parameter.
References
- 20060320 Noah's Classifieds Multiple Path Disclosure and Cross Site Scripting Vulnerabilities mailing-list
- http://zone14.free.fr/advisories/1
- 17151 vdb-entry
- noahs-index-xss(25099) vdb-entry
- 20060308 Noah's Classifieds Multiple Cross-Site Scripting Vulnerabilities mailing-list
- noahs-index-path-disclosure(25331) vdb-entry