CVE-2007-3078

Multiple cross-site scripting XSS vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter Authors and Publication titles to 1 authoractions.php or 2 publicationactions.php...

CVE-2007-3078

Multiple cross-site scripting XSS vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter Authors and Publication titles to 1 authoractions.php or 2 publicationactions.php...

CVE-2007-3078

CVE-2007-3078 : Aigaion versions before 1.3.3 are affected by multiple cross-site scripting (XSS) flaws in the title parameter for authors and publications (via authoractions.php and publicationactions.php). The underlying issue is that user-supplied input in the title fields is not properly vali...