Description
Multiple cross-site scripting (XSS) vulnerabilities in add_url.php in CloudNine Interactive Links Manager 2006-06-12 allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, or (3) keywords parameters.
References
- linksmanager-add-xss(28500) vdb-entry
- http://evuln.com/vulns/136/description.html
- 28067 vdb-entry
- 19650 vdb-entry
- 21560 third-party-advisory
- 20060912 [eVuln] Links Manager Multiple XSS and SQL InjectionVulnerabilities mailing-list