CVE-2007-2732

CVE-2007-2732 describes multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS. Remote attackers can inject arbitrary web script or HTML via the (1) path parameter to view/search/ and (2) through parameters in view/supplynews/ such as companyname, country, email, firstname, middlename,...