CVE-2007-2991

In CVE-2007-2991, the vulnerability is a Cross‑Site Scripting (XSS) flaw in Evenzia CMS, specifically in includes/send.inc.php, exploitable via the PATH_INFO parameter. The documented impact is remote attackers can inject arbitrary web script or HTML into the context of the affected application. ...