Description
Cross-site scripting (XSS) vulnerability in phpwcms 1.2.5-DEV allows remote attackers to inject arbitrary web script or HTML via the BL[be_cnt_plainhtml] parameter to include/inc_tmpl/content/cnt6.inc.php.
References
- 18063 vdb-entry
- 20239 third-party-advisory
- ADV-2006-1934 vdb-entry
- phpwcms-template-files-xss(26638) vdb-entry
- http://www.kapda.ir/advisory-331.html
- 939 third-party-advisory
- 20060521 [KAPDA::#43] - phpwcms multiple vulnerabilities mailing-list