Description
Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza and (2) tresckomentarza parameters.
References
- 20060411 [eVuln] VNews Multiple Vulnerabilities mailing-list
- 19435 third-party-advisory
- ADV-2006-1173 vdb-entry
- http://www.evuln.com/vulns/112
- 24275 vdb-entry
- 17317 vdb-entry
- vnews-news-xss(25530) vdb-entry