Description
Cross-site scripting (XSS) vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments.
References
- vcddb-comment-xss(28764) vdb-entry
- ADV-2006-3481 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=445066
- 21781 third-party-advisory
- 19871 vdb-entry