Security Advisory
CVE-2005-2441
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.