CVE-2009-2133

Pivot is affected by multiple cross-site scripting (XSS) vulnerabilities in version 1.40.4 and 1.40.7. The issues allow remote attackers to inject arbitrary script/HTML via various parameters to pivot/index.php (and related actions) and related user/pivot pages. The provided sources enumerate the...