Description
Multiple cross-site scripting (XSS) vulnerabilities in aBitWhizzy allow remote attackers to inject arbitrary web script or HTML via the d parameter to (1) whizzery/whizzypic.php or (2) whizzery/whizzylink.php.
References
- http://lostmon.blogspot.com/2007/03/abitwhizzy-traversal-folder-enumeration.html
- ADV-2007-1136 vdb-entry
- 23167 vdb-entry
- abitwhizzy-multiple-xss(33279) vdb-entry
- http://downloads.securityfocus.com/vulnerabilities/exploits/23167.html
- 34507 vdb-entry
- 34508 vdb-entry
- 24679 third-party-advisory