Description
Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Security Leak to lock in HTML-Code," possibly due to a cross-site scripting (XSS) vulnerability involving comments.
References
- osads-comments-xss(26914) vdb-entry
- http://osads.sourceforge.net/viewtopic.php?t=3
- ADV-2006-2143 vdb-entry
- 18280 vdb-entry
- 20441 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=422081