Description
Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script via the loginmessage parameter.
References
- 20060603 Pixelpost <= 1-5rc1-2 multiple vulnerabilities mailing-list
- http://retrogod.altervista.org/pixelpost_15rc12_xpl.html
- 1061 third-party-advisory
- pixelpost-index-loginmessage-xss(26925) vdb-entry