CVE-2006-5127

CVE-2006-5127 affects Bartels Schoene ConPresso prior to version 4.0.5a. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via (1) nr in detail.php, (2) msg in db_mysql.inc.php, and (3) pos in index.php. Root cause: X...