Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) autor, (2) www, (3) temat, and (4) tresc parameters.
References
- 19448 third-party-advisory
- vbook-index-xss(25521) vdb-entry
- 20060411 [eVuln] [V]Book Multiple Vulnerabilities mailing-list
- 24271 vdb-entry
- 17319 vdb-entry
- ADV-2006-1174 vdb-entry
- http://evuln.com/vulns/111