Description
Cross-site scripting (XSS) vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/index.php, and unspecified vectors related to certain other files. NOTE: some of these details are obtained from third party information.
References
- 20720 vdb-entry
- progsys-index-xss(29770) vdb-entry
- 20061024 ProgSys verion 0.151 XSS vulnerability mailing-list
- 1782 third-party-advisory
- http://www.vigilon.com/advisories/vg-progsys-24-10-2006.txt
- ADV-2006-4194 vdb-entry
- 22532 third-party-advisory