Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dan Jensen Travelsized CMS 0.4.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) page, (2) page_id, or (3) language parameter.
References
- ADV-2006-4609 vdb-entry
- 23021 third-party-advisory
- 20061118 [MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site mailing-list
- 20061118 [MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site Scripting Issues mailing-list
- 21169 vdb-entry
- travelsized-index-xss(30392) vdb-entry
- 1017251 vdb-entry
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls35