Description
Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the Seitenname parameter.
References
- 20060722 [MajorSecurity #24] Fire-Mouse TopList <=v1.1 - Cross Site Scripting mailing-list
- 19120 vdb-entry
- ADV-2006-2962 vdb-entry
- http://www.majorsecurity.de/advisory/major_rls24.txt
- firemouse-toplist-add-xss(27912) vdb-entry
- 1299 third-party-advisory
- 21173 third-party-advisory