CVE-2009-3789

OpenDocMan 1.2.5 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities (CVE-2009-3789). The disclosed vectors include user-supplied data in last_message across endpoints (add.php, toBePublished.php, index.php, admin.php) and in PATH_INFO across several pages (category.php, department...