Heap
23-09-08, 02:47
Cross-site scripting (XSS) vulnerability in verify_login.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the form_username parameter (aka user name field).
More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4168)
More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4168)