CVE-2007-0611 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) inc.page.php and (2) inc.text.php.

Reference

http://osvdb.org/36682 http://osvdb.org/36683 http://sourceforge.net/project/shownotes.php?release_id=480714&group_id=98260 http://www.vupen.com/english/advisories/2007/0360