CVE-2009-4713: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via 1 the codcategoria parameter to categoria.php, 2 the opcao parameter to index.php, and the PATHINFO to 3 categoria.php and 4 index.php...