CVE-2007-3596: Undefined Security Weakness

inc/vulcheck.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sessid parameter, which has unknown impact and remote attack vectors, probably cross-site scripting XSS...