Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an error message resulting from a failed SQL query.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php_blue_dragon | Blue_dragon | platinum_2.8.0 (including) | platinum_2.8.0 (including) |
| Php_blue_dragon | Blue_dragon | platinum_2.9.1 (including) | platinum_2.9.1 (including) |