Description
Multiple cross-site scripting (XSS) vulnerabilities in phpx 3.5.15 allow remote attackers to inject arbitrary web script or HTML via (1) the signature in "dans profile," or (2) search.php.
References
- 20070319 phpx 3.5.15 multiples vulnerabilities mailing-list
- 34413 vdb-entry
- 34412 vdb-entry
- 2457 third-party-advisory
- 23033 vdb-entry
- ADV-2007-1087 vdb-entry
- 24565 third-party-advisory
- phpx-search-xss(33154) vdb-entry
- phpx-signature-xss(33153) vdb-entry