CVE-2006-3585

CVE-2006-3585 describes multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1. Affected components include: the login parameter in admin/cms/index.php; parameters on the Supply news page in formmail.php; the URL in the Site statistics page; and the query_string parameter when ...