Description
Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue, CVE-2007-3835.
References
- 2889 third-party-advisory
- 24978 vdb-entry
- 26041 third-party-advisory
- 20070716 ExLibris Aleph and Metalib Cross Site Scripting Attack mailing-list
- http://escarpment.net/exlibris.txt