CVE-2008-5933

The CVE-2008-5933 entry documents multiple cross-site scripting (XSS) flaws in CMS ISWEB 3.0, specifically in index.php where the strcerca and id_oggetto parameters can be used to inject arbitrary web script or HTML. The vulnerability arises from unsafely handling these inputs, enabling an attack...