|
Description
|
|
Multiple vulnerabilities were identified in PHP-Post (PHPp), which may be exploited by attackers to inject malicious HTML code.
The first flaw is due to input validation errors in the "profile.php" and "mail.php" scripts when processing a specially crafted "user" parameter, which may be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
The second vulnerability is due to an input validation error when processing the "subject" variable passed with a new post, which may be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
|
