Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dvbbs | Dvbbs | 7.1 (including) | 7.1 (including) |
| Dvbbs | Dvbbs | 7.1_sp2 (including) | 7.1_sp2 (including) |