CVE-2010-3208

Cross-site scripting XSS vulnerability in ajax.php in Wiccle Web Builder WWB 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the posttext parameter in a site customsearch action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-3208

CVE-2010-3208 is an XSS vulnerability in the Wiccle Web Builder (WWB) web application. The affected components are the PHP file path involved, specifically in the ajax.php handling for WWB versions 1.00 and 1.0.1. The root cause is a cross-site scripting flaw that allows an attacker to inject arb...