CVE-2009-0424

The CVE-2009-0424 entry concerns AN Guestbook (ANG) prior to version 0.7.7. The vulnerability is a Cross‑Site Scripting (XSS) in sign1.php where the country parameter is not properly sanitized, enabling an attacker to inject arbitrary script/HTML via affected paths (administrator/manage.php or ad...