CVE-2007-3344

CVE-2007-3344 describes multiple cross-site scripting (XSS) vulnerabilities in netjukebox 4.01b. The issue allows remote attackers to inject arbitrary web script or HTML via the following parameters: (1) album_id, (2) order, (3) sort, (4) filter, (5) genre_id to index.php, and (6) url to ridirect...