Description
Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter.
References
- 18267 vdb-entry
- labwiki-recentchanges(26902) vdb-entry
- http://pridels0.blogspot.com/2006/06/labwiki-xss-vuln.html
- ADV-2006-2123 vdb-entry
- 20417 third-party-advisory
- 25963 vdb-entry