Description
Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) comentarii.php or (2) view.php. NOTE: this issue might be resultant from SQL injection.
References
- 25288 vdb-entry
- 1016027 vdb-entry
- 25287 vdb-entry
- 17880 third-party-advisory
- newsportal-comentarii-view-xss(26259) vdb-entry