CVE-2012-5296: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 approve.asp, 2 delete.asp, 3 edit.asp, or 4 edit2.asp...