Description
Cross-site scripting (XSS) vulnerability in index.php in DEV Web Management System (WMS) 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
References
- http://www.x0n3-h4ck.org/index.php?name=news&article=139
- 20590 vdb-entry
- 1758 third-party-advisory
- 20061018 {x0n3-h4ck} DEV Web Manager System <= 1.5 XSS Exploit mailing-list
- dev-index-xss(29659) vdb-entry