CVE-2005-3552

CVE-2005-3552 affects PHP-Kit 1.6.1 RC2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws that allow a remote attacker to inject arbitrary script/HTML via several vectors, including login/profile.php, login/userinfo.php, admin/admin.php, imcenter.php, referer statistics,...