Description
Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to add arbitrary content and conduct XSS attacks via a direct request to add_art.php. NOTE: this issue was originally reported as SQL injection, but this is not likely.
References
- 20060719 Multiple Vulnerabilities RPS mailing-list
- 28640 vdb-entry
- rps-addart-xss(39972) vdb-entry
- 2322 third-party-advisory