Description
Multiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtuser or (2) txtpassword parameters.
References
- http://pridels0.blogspot.com/2006/03/uniforum-xss-vuln.html
- ADV-2006-1101 vdb-entry
- 17245 vdb-entry
- uniforum-wbadmlog-xss(25433) vdb-entry
- 24123 vdb-entry
- 19397 third-party-advisory