Multiple cross-site scripting (XSS) vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) entryid or (2) password parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Megabook | Megabook | 2.0 (including) | 2.0 (including) |
| Megabook | Megabook | 2.1 (including) | 2.1 (including) |