Description
Cross-site scripting (XSS) vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML via a BR element with an extraneous IMG tag and a STYLE attribute that contains "/**/" comment sequences, which bypasses the XSS protection scheme.
References
- 1070 third-party-advisory
- ADV-2006-2170 vdb-entry
- 20060606 ParticleSoft Wiki v1.0.2 mailing-list
- particlewiki-edit-xss(26952) vdb-entry