Description (CNA)
Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/14423
- http://www.securityfocus.com/archive/1/426874/100/0/threaded
- http://secunia.com/advisories/16220
- http://www.osvdb.org/18662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21680
- http://www.osvdb.org/18663
- http://marc.info/?l=bugtraq&m=112300586019568&w=2
- http://securitytracker.com/id?1014614
ADP enrichment
No English description supplied.
- http://www.securityfocus.com/bid/14423
- http://www.securityfocus.com/archive/1/426874/100/0/threaded
- http://secunia.com/advisories/16220
- http://www.osvdb.org/18662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21680
- http://www.osvdb.org/18663
- http://marc.info/?l=bugtraq&m=112300586019568&w=2
- http://securitytracker.com/id?1014614