Description
Cross-site scripting (XSS) vulnerability in user/forgotPassStep2.jsp in the admin interface in C-SAM oneWallet 210_07062007;1.0 allows remote attackers to inject arbitrary web script or HTML via the loginID parameter.
References
- onewallet-forgetpassword-xss(35838) vdb-entry
- 25224 vdb-entry
- 20070807 C-SAM oneWallet forget password Cross Site Scripting vulnerability mailing-list