Description
Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the mode parameter in msgReader$1 and (2) the end of the URI in viewDepartment$.
References
- manila-multiple-xss(25753) vdb-entry
- 17475 vdb-entry
- 24554 vdb-entry
- 19636 third-party-advisory
- 692 third-party-advisory
- 20060411 Manila <= 9.5 - XSS Vulnerabilities mailing-list