Description
Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- JVN#36993373 third-party-advisory
- http://wap2.jp/download/spict/
- JVNDB-2012-000060 third-party-advisory