Cross site scripting

Cross-site scripting XSS vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web script or HTML via the msgerreur parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2264

The CVE-2008-2264 entry concerns an XSS vulnerability in CyrixMED 1.4, triggered in index.php via the msg_erreur parameter. Affected component: index.php function handling user-supplied input. Underlying cause is a lack of proper input sanitization sufficient to prevent HTML/script injection. Imp...