This host is running Flashlight Free Edition and is prone to Cross Site Scripting Vulnerability.

Successful exploitation could allow remote attackers to execute arbitrary HTML script codes in a user's established login session into the context of an affected site running the vulnerable web application. Impact Level: Network/Application.

Apply patch, http://www.clixint.com/support/viewtopic.php?f=3&t=542 ***** NOTE: Ignore this warning, if above mentioned patch is already applied. *****

This flaw is due to an error in 'images.php' which doesn't verify user supplied input before being used via 'date' parameter.

Image Hosting Script DPI 1.1 Final and prior on all running platform.

• http://secunia.com/advisories/37456
• http://www.exploit-db.com/exploits/10300

---

Updated on 2015-03-25