CVE-2008-2994

PHPEasyData 1.5.4 is affected by multiple XSS vulnerabilities (CVE-2008-2994). The flaws allow remote attackers to inject arbitrary web script or HTML via the annuaire parameter to last_records.php and annuaire.php, and via the by and cat_id parameters to annuaire.php. Root cause is improper inpu...