Description
Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php.
References
- 26068 vdb-entry
- prenewsmanager-multiple-xss(26692) vdb-entry
- 20060524 Pre News Manager v1.0 mailing-list
- 996 third-party-advisory
- ADV-2006-1990 vdb-entry
- 26070 vdb-entry
- 20284 third-party-advisory
- 26069 vdb-entry
- 26071 vdb-entry
- 26072 vdb-entry
- 18333 vdb-entry
- 26066 vdb-entry
- 26067 vdb-entry