Description
Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
References
- 35123 third-party-advisory
- JVN#28521500 third-party-advisory
- 34999 vdb-entry
- 54545 vdb-entry
- http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20090512155247
- rescuetrees-unspecified-xss(50579) vdb-entry
- JVNDB-2009-000028 third-party-advisory