Description
Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) date_from, (2) date_to, and (3) date parameter.
References
- http://d4igoro.blogspot.com/2006/04/linpha-xss-vulnerabilities.html
- linpha-statsview-xss(25916) vdb-entry
- ADV-2006-1396 vdb-entry
- 20060417 Linpha 1.1.0 - XSS Vulnerabilities mailing-list
- 19679 third-party-advisory
- 17581 vdb-entry