CVE-2007-2071

Open-gorotto 2.0a (2006-02-08, 2006-03-19, 2006-04-07 editions) contains multiple cross-site scripting (XSS) vulnerabilities disclosed for several pages under pub/modules (including d/_top.html, a/_access.html, ci/, f/ directories). The flaws allow remote attackers to inject arbitrary scripts via...