[KAPDA::#8] Domain Manager Pro Vulnerability – A remote user can conduct cross-site scripting attacks.The ‘panel’ script does not properly validate user-supplied input at the ‘err’ parameter.So remote user can inject html script to fake login form and steal admin’s password.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40956/dmproxss.txt
Source: https://packetstormsecurity.com/files/40956/dmproxss.txt.html