Description
Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) login parameter.
References
- 37133 vdb-entry
- 2946 third-party-advisory
- 20070724 PR07-18: Cross-site Scripting (XSS) / HTML injection on Webbler CMS admin login page (1) mailing-list
- http://www.procheckup.com/Vulner_2007.php
- http://tincan.co.uk/?lid=1975
- 20070724 PR07-19: Cross-site Scripting (XSS) / HTML injection on Webbler CMS admin login page (2) mailing-list