Description
Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote attackers to inject arbitrary web script or HTML via the (1) login, (2) profile, (3) profile2, and (4) ref parameters.
References
- 28793 vdb-entry
- osi-affiliate-login-xss(41825) vdb-entry
- 29779 third-party-advisory
- 44376 vdb-entry
- 28785 vdb-entry
- http://www.mrzayas.es/2008/04/11/xss-en-osiaffiliate/
- work-systemecommerce-main-xss(41811) vdb-entry