Description
Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLE_URL parameter. NOTE: it is possible that this issue is resultant from SQL injection.
References
- 20060606 'Multiple Sql injection and XSS in integramod portal mailing-list
- 1085 third-party-advisory
- 20528 third-party-advisory
- ADV-2006-2236 vdb-entry
- integramod-index-xss(27092) vdb-entry
- 18464 vdb-entry