Description
Cross-site scripting (XSS) vulnerability in add_url2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
References
- 28070 vdb-entry
- 21565 third-party-advisory
- 19652 vdb-entry
- 20060912 [eVuln] indexcity SQL Injection and XSS Vulnerabilities mailing-list
- indexcity-addurl2-xss(28509) vdb-entry
- http://evuln.com/vulns/135/description.html