Description
Multiple cross-site scripting (XSS) vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web script or HTML via certain inputs to (1) acc_verify.php or (2) project.php.
References
- 984 third-party-advisory
- iflance-multiple-scripts-xss(26696) vdb-entry
- 26044 vdb-entry
- ADV-2006-1988 vdb-entry
- 20060524 iFlance v1.1 mailing-list
- 20282 third-party-advisory
- 26043 vdb-entry