CVE-2008-2561

The CVE-2008-2561 entry documents multiple cross-site scripting (XSS) vulnerabilities in 427BB version 2.3.1. The flaws allow remote attackers to inject arbitrary script/HTML via these vectors: PATH_INFO to register.php, reminder.php, and search.php; the uname, email, and email2 parameters to reg...