CVE-2006-1582

CVE-2006-1582 describes a cross-site scripting (XSS) vulnerability in Blank'N'Berg 0.2, exploitable via the _path parameter in index.php. The root cause is an injection of arbitrary web script/HTML, potentially stemming from a directory traversal-related issue noted in the description. Affected s...