CVE-2009-4469

CVE-2009-4469 describes multiple cross-site scripting (XSS) vulnerabilities in the PHP script pagenumber.inc.php of phpPowerCards 2.0 . The XSS can be exploited by supplying crafted input via (1) PATH_INFO, (2) archiv, and (3) subcat parameters. The connected records corroborate the same payload ...