CVE-2007-5127

CVE-2007-5127 describes multiple XSS vulnerabilities in SimpGB 1.46.02 . The issues allow remote attackers to inject arbitrary JavaScript/HTML via two parameters: (1) l_username in the default admin/ URI and (2) l_emoticonlist in admin/emoticonlist.php. The root cause is unsanitized/unvalidated i...