CVE-2006-2804

CVE-2006-2804 is a cross-site scripting (XSS) vulnerability in index.cfm of Goss Intelligent Content Management (iCM) 7.0 and earlier. The issue stems from input via the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected product: Goss iCM (versions 7.0 a...