Description
Multiple cross-site scripting (XSS) vulnerabilities in DVDdb 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the movieid parameter to loan.php or (2) the s parameter to listmovies.php.
References
- http://pridels0.blogspot.com/2007/05/dvddb-xss-vuln.html
- 23764 vdb-entry
- ADV-2007-1648 vdb-entry
- 35544 vdb-entry
- 25127 third-party-advisory
- dvddb-loan-listmovies-xss(34017) vdb-entry
- 35545 vdb-entry