Multiple cross-site scripting (XSS) vulnerabilities in SmartPPC Pro allow remote attackers to inject arbitrary web script or HTML via the username parameter in (1) directory.php, (2) frames.php, and (3) search.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Smartppc_pro | Orbitscripts | * | * |