CVE-2007-6545

CVE-2007-6545 concerns RunCMS pre-1.6.1, with multiple XSS vectors: (1) subject parameter in modules/news/submit.php, (2) PATH_INFO to modules/news/index.php (potentially related to XoopsPageNav), and (3) an avatar image to edituser.php. The connected documents do not provide exploitation details...