Description
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) RSS/RSS.php and (2) possibly other vectors.
References
- 24816 vdb-entry
- 17619 vdb-entry
- ADV-2006-1424 vdb-entry
- 20060420 LinPHA provenance/acknowledgement mailing-list
- 19719 third-party-advisory
- linpha-rss-xss(26269) vdb-entry