CVE-2009-2240

Description

Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• ad2000 / free-sw_leger1.6.4

References

• MISChttp://www.securityfocus.com/bid/35068
• VENDOR_ADVISORYhttp://secunia.com/advisories/35148
• MISChttp://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000031.html
• MISChttp://www.ad2000.co.jp/service/index.html
• MISChttp://jvn.jp/en/jp/JVN57036470/index.html