CVE-2005-2853

GuppY 4.5.3a and earlier versions are affected by multiple XSS vulnerabilities. The issues arise in the PHP-based GuppY CMS (printfaq.php) where unsafely handled input and HTTP header data (Referer, User-Agent) are not properly sanitized by error.php, enabling remote injection of arbitrary script...