Description
Multiple cross-site scripting (XSS) vulnerabilities in URD before 0.6.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the fatal_error page and unspecified other components.
References
- 35540 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=692011