Description
Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) index.php, (2) addknowledge.php, and (3) addscreenshot.php.
References
- http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0006
- knowledgebank-multiple-xss(29700) vdb-entry
- 20061019 Multiple XSS Vulnerabilities in KnowledgeBank 1.01 mailing-list
- 1017097 vdb-entry
- 1769 third-party-advisory
- 20641 vdb-entry