CVE-2005-4393

CVE-2005-4393 describes a cross-site scripting (XSS) vulnerability in the show.cfm component of the e-publish CMS, version 2.0 and earlier. The underlying issue allows remote attackers to inject arbitrary web script or HTML by supplying the parameters (1) obcatid and (2) comid). Affected product:...