Description
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) Gallery Comments pages, (2) Feedback pages, (3) Search Results pages, and (4) the Statistics Log viewer.
References
- 33290 vdb-entry
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250
- ADV-2007-0604 vdb-entry
- 33276 vdb-entry
- 24080 third-party-advisory
- 33289 vdb-entry
- 33288 vdb-entry
- webapp-searchresultspages-xss(32499) vdb-entry
- webapp-statisticslogviewer-xss(32498) vdb-entry
- 22563 vdb-entry
- webapp-gallery-feedback-xss(32526) vdb-entry