Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters.
References
- 20013 vdb-entry
- http://www.security-net.biz/adv/D13906a.txt
- 28767 vdb-entry
- emucms-index-xss(28939) vdb-entry
- ADV-2006-3604 vdb-entry
- 21883 third-party-advisory