Description
Cross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, as originally reported for index.php.
References
- 18510 vdb-entry
- qtofilemanager-index-xss(27310) vdb-entry
- 20681 third-party-advisory
- 20060618 qtofilemanager xss attack ! mailing-list
- ADV-2006-2434 vdb-entry
- 1016333 vdb-entry
- 1118 third-party-advisory