Description
WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to (1) the query string, (2) Profiles, (3) the Forum Post icon field, (4) the Edit Profile, and (5) the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting (XSS).
References
- http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250
- 33277 vdb-entry
- ADV-2007-0604 vdb-entry
- 24080 third-party-advisory
- 33283 vdb-entry
- 33287 vdb-entry
- 22563 vdb-entry
- 33286 vdb-entry