Description
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 20070214 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to unspecified fields in user Profiles. NOTE: some of these details are obtained from third party information.
References
- 33301 vdb-entry
- ADV-2007-0605 vdb-entry
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=251
- webapporg-net-profileedit-xss(32506) vdb-entry
- 22563 vdb-entry