CVE-2008-4168

The CVE-2008-4168 entry describes a Cross-site scripting (XSS) vulnerability in Pro2col Stingray FTS, specifically in verify_login.jsp, exploitable via the form_username field (the user name). The underlying cause is an input handling flaw that allows injection of arbitrary web script or HTML. Af...