CVE-2009-2330

CVE-2009-2330 describes a cross-site scripting (XSS) vulnerability in the CMS Chainuk 1.2 and earlier. The flaw exists in admin/admin_menu.php and is exploitable via the menu parameter, allowing remote attackers to inject arbitrary web script or HTML. Documents consistently identify the affected ...