Description
Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field.
References
- 20061012 MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues mailing-list
- 20061011 MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues mailing-list
- 2389 third-party-advisory
- http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt
- 22365 third-party-advisory
- 20474 vdb-entry