Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Drake CMS 0.4.9 allows remote attackers to inject arbitrary web script or HTML via the option parameter...

Drake CMS 0.4.9 - 'index.php' Cross-Site Scripting Vulnerability

Drake CMS 0.4.9 'index.php' Cross-Site Scripting Vulnerability. CVE-2007-6695. Webapps exploit for php platform source: http://www.securityfocus.com/bid/27459/info Drake CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An...