Description
Multiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script or HTML via the (1) news_archive, (2) language, and (3) intranetLogin parameters in (a) index.php; the (4) sites_id parameter in (b) sites.php; and the (5) news_id parameter in (c) news_more.php.
References
- clubpage-multiple-scripts-xss(27243) vdb-entry
- 26688 vdb-entry
- 26687 vdb-entry
- http://pridels0.blogspot.com/2006/06/clubpage-vuln.html
- 26689 vdb-entry
- 20706 third-party-advisory
- ADV-2006-2461 vdb-entry
- 18552 vdb-entry