Description
Multiple cross-site scripting (XSS) vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the (1) title and (2) message parameters.
References
- vbook-title-message-xss(49161) vdb-entry
- 20090309 DDIVRT-2009-21 vBook Login Application Cross-site Scripting Vulnerability mailing-list
- 34046 vdb-entry