Description
Cross-site scripting (XSS) vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter.
References
- dpi-misc-xss(72823) vdb-entry
- 51734 vdb-entry
- 47786 third-party-advisory
- 78660 vdb-entry
- http://packetstormsecurity.org/files/view/109240/dpi10-xss.txt