Description
Cross-site scripting (XSS) vulnerability in Fill Threads Database (FTD) 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the (1) search field or (2) an e-mail message.
References
- 1016642 vdb-entry
- 19391 vdb-entry
- ftd-search-mail-xss(28278) vdb-entry
- 1371 third-party-advisory
- 20060805 XSS Vulnerability in FTD v3.7.3 mailing-list