Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2007-3049

CVE-2007-3049 : In Buttercup Web File Manager (BWFM), the vulnerability is an XSS in index.php via the title parameter. The root cause is lack of input sanitization on the title field, allowing remote attackers to inject arbitrary web script/HTML. According to the NVD entry, the impact is partial...