Description
Cross-site scripting (XSS) vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter.
References
- ADV-2006-1700 vdb-entry
- 17892 vdb-entry
- maxxschedule-logon-xss(26310) vdb-entry
- 25446 vdb-entry
- 20039 third-party-advisory
- 1016093 vdb-entry