Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters.
References
- 31968 third-party-advisory
- 31312 vdb-entry
- 20080921 [MajorSecurity Advisory #53]BLUEPAGE CMS - Cross Site Scripting and Session Fixation Issues mailing-list
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls53
- bluepagecms-index-xss(45321) vdb-entry