CVE-2010-1367

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

CVE-2010-1367

CVE-2010-1367 describes multiple cross-site scripting (XSS) vulnerabilities in the admin/admin_login.php component of Uiga Fan Club, allowing remote attackers to inject arbitrary web script or HTML via the admin_name or admin_password parameters. The issue affects the login handling logic, enabli...