Description
Cross-site scripting (XSS) vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter.
References
- ADV-2006-1484 vdb-entry
- 24876 vdb-entry
- http://pridels0.blogspot.com/2006/04/logmethods-xss-vuln.html
- 17675 vdb-entry
- 19793 third-party-advisory
- logmethods-lmsa2z-xss(25968) vdb-entry