phpWebSite 0.7.3/0.8.x/0.9.x Comment Module - 'CM_pid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11088/info It is reported that phpWebSite is susceptible to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The cross-site scripting issue is present in a parameter of the comments module script. An attacker can exploit...