Description
Cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624 allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI.
References
- http://sourceforge.net/project/shownotes.php?group_id=69837&release_id=485558
- 24110 third-party-advisory
- qdig-qwd-xss(32421) vdb-entry
- 20070210 [XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel mailing-list
- ADV-2007-0555 vdb-entry
- 20070211 Re: [XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel mailing-list
- 32194 vdb-entry
- 22510 vdb-entry