CVE-2006-3131

Clubpage is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue arises in the web application’s PHP files where user-supplied parameters can be injected: (1) news_archive, (2) language, and (3) intranetLogin in index.php; (4) sites_id in sites.php; and (5) news_id in news_m...