CVE-2009-0105

CVE-2009-0105 describes an XSS vulnerability in EZpack 4.2b2, where index.php is vulnerable via the mdfd parameter in a prog action. The issue allows remote attackers to inject arbitrary web script or HTML; CVSSv2 base score 4.3 (Medium) with Network access, no authentication, and partial integri...