CVE-2007-2099

CVE-2007-2099 affects OpenConcept Back-End CMS 0.4.7. The vulnerability is a cross-site scripting (XSS) in htdocs/php.php via the page[] parameter, allowing remote attackers to inject arbitrary script/HTML. The CVSSv2 vector (AV:N/AC:M/Au:N/C:P/I:P/A:P) yields a base score of 6.8 (MEDIUM) with ne...