CVE-2006-1946

Visale 1.0 and earlier versions are affected by multiple XSS vulnerabilities. Specifically, remote attackers can inject arbitrary web script or HTML via (1) keyval in pbpgst.cgi, (2) catsubno in pblscg.cgi, and (3) listno in pblsmb.cgi. The reports do not provide exploit details or confirm remedi...