Description
Multiple cross-site scripting (XSS) vulnerabilities in OpenCMS OAMP Comments Module 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the name field in a comment, and other unspecified vectors.
References
- http://www.csnc.ch/misc/files/advisories/CVE-2009-4505_opencms_oamp_comments_module_xss_cyrill_brunschwiler.txt
- 38926 vdb-entry
- 39099 third-party-advisory
- 20100324 CVE-2009-4505 OpenCMS OAMP Comments Module XSS mailing-list