Description
Cross-site scripting (XSS) vulnerability in Mailbox.mws in OdysseySuite, possibly 4.0.729, allows remote attackers to inject arbitrary web script or HTML via the idkey parameter.
References
- 37418 vdb-entry
- ADV-2007-3346 vdb-entry
- 25891 vdb-entry
- odysseysuite-mailbox-xss(36878) vdb-entry
- http://pridels-team.blogspot.com/2007/10/odysseysuite-internet-banking-vuln.html
- 27022 third-party-advisory