CVE-2006-2208

CVE-2006-2208 describes multiple XSS flaws in MyNews 1.6.2 (and related 1.6.x/1.6.4 variants) affecting mynews.inc.php. The vulnerability allows remote attackers to inject arbitrary scripts via the hash and page parameters (and, for some variants, via the hash parameter in an admin action to inde...