Description
Cross-site scripting (XSS) vulnerability in the RSS feed reader functionality in Lunascape 4.1.3 build2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 35364 vdb-entry
- ADV-2007-1538 vdb-entry
- 23665 vdb-entry
- JVN#36628264 third-party-advisory
- lunascape-rssfeed-xss(34074) vdb-entry
- http://lunapedia.lunascape.jp/index.php?title=Lunascape_4#2007.2F04.2F25_ver_4.2.0
- 25000 third-party-advisory