CVE-2007-4082

Description

Cross-site scripting (XSS) vulnerability in contact_author.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter.

Affected products

• alstrasoft / article_manager_pro1.6

References

• MISChttp://osvdb.org/37088
• MISChttp://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html