Description
Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter.
References
- http://kiki91.altervista.org/exploit/dir.txt
- ADV-2006-1803 vdb-entry
- 20118 third-party-advisory