Description
Multiple cross-site scripting (XSS) vulnerabilities in dynaliens 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) recherche.php3 or (2) ajouter.php3.
References
- 20070308 dynaliens v2.0/v2.1 bypass admin authentification + XSS mailing-list
- http://forums.avenir-geopolitique.net/viewtopic.php?t=2722
- 2403 third-party-advisory
- 22874 vdb-entry