Description
Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password fields, or certain other input text boxes.
References
- 20287 third-party-advisory
- 25778 vdb-entry
- ifdate-multiple-xss(26678) vdb-entry
- 991 third-party-advisory
- 20060524 iFdate v1.2 mailing-list
- ADV-2006-1987 vdb-entry
- 18102 vdb-entry