CVE-2007-2916

GMTT Music Distro 1.2 contains a cross-site scripting (XSS) vulnerability in showown.php that can be triggered via the st parameter. The root cause is improper handling of user-supplied input in showown.php, allowing injected web script or HTML to be executed in the context of the victim’s browse...