Description
Cross-site scripting (XSS) vulnerability in error messages in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611.
References
- ADV-2007-0454 vdb-entry
- 33650 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=481131&group_id=98260
- flip-triggererrortext-xss(31900) vdb-entry