Cross-site scripting (XSS) vulnerability in liens.php3 in liens_dynamiques 2.1 allows remote attackers to inject arbitrary web script or HTML by using the ajouter=1 query string and the add menu.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Liens_dynamiques | Xentraz | 2.1 (including) | 2.1 (including) |
References
- http://osvdb.org/33540
- http://www.securityfocus.com/archive/1/456986/100/0/threaded
- http://www.securityfocus.com/bid/22070
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31528
- http://osvdb.org/33540
- http://www.securityfocus.com/archive/1/456986/100/0/threaded
- http://www.securityfocus.com/bid/22070
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31528