CVE-2008-2117

CVE-2008-2117 is a cross-site scripting (XSS) vulnerability in Project Alumni 1.0.9. The issue affects the pages/news.page.inc component, where the year parameter in a news action to index.php can be exploited to inject arbitrary web script or HTML. This CVE is documented across multiple sources ...