Description
Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter.
References
- 19385 third-party-advisory
- 24139 vdb-entry
- metisware-instructor-personaltaskcreate-xss(25490) vdb-entry
- 17234 vdb-entry
- http://pridels0.blogspot.com/2006/03/metisware-instructor-xss-vuln.html
- ADV-2006-1112 vdb-entry