Description
Multiple cross-site scripting (XSS) vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pass and (2) pass2 parameters in (a) add.php or the (3) id parameter in (b) members/index.php.
References
- 20060720 Re: [MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure mailing-list
- 20060720 [MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure mailing-list
- topxl-add-index-xss(27880) vdb-entry
- ADV-2006-2914 vdb-entry
- http://www.majorsecurity.de/advisory/major_rls22.txt
- 1016548 vdb-entry
- 21145 third-party-advisory
- 27414 vdb-entry
- 27413 vdb-entry
- 1267 third-party-advisory
- 19098 vdb-entry