Description
Multiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the (1) visitor_language parameter to register.php or (2) message parameter.
References
- nexorone-login-xss(73001) vdb-entry
- http://www.vulnerability-lab.com/get_content.php?id=304
- 51876 vdb-entry
- 47897 third-party-advisory
- 20120205 NexorONE Online Banking - Multiple Cross Site Vulnerabilities mailing-list