Description
Cross-site scripting (XSS) vulnerability in the administrative interface in Dotclear before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- dotclear-admin-interface-xss(49138) vdb-entry
- http://dotclear.org/blog/post/2009/02/05/Dotclear-2.1.5
- ADV-2009-0636 vdb-entry
- 34181 third-party-advisory
- 34036 vdb-entry