Unscored CVE-2006-2953 EUVD-2006-2950GHSA-32qw-m28h-748p

Cross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows remote attackers to inject arbitrary web scrip…

Published Jun 12, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the sqlType parameter.

References

http://pridels0.blogspot.com/2006/06/officeflow-26-vuln.html
20545 third-party-advisory
18367 vdb-entry
1016255 vdb-entry
ADV-2006-2246 vdb-entry
officeflow-default-xss(27022) vdb-entry