Description
Cross-site scripting (XSS) vulnerability in inventory/display/display_results.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter.
References
- 20061114 Inventory Manager [injection sql & xss (get)] mailing-list
- 1875 third-party-advisory
- 22915 third-party-advisory
- 21069 vdb-entry
- inventorymanager-displayresults-xss(30276) vdb-entry