Description
Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Sex parameter in index.php, (2) ProfileType parameter in join_form.php, and (3) Email parameter in forgot.php.
References
- 26832 vdb-entry
- ADV-2006-2533 vdb-entry
- 20820 third-party-advisory
- aedating-multiple-scripts-xss(27339) vdb-entry
- 26830 vdb-entry
- 20060622 aeDating 4.1 XSS mailing-list
- 26831 vdb-entry