CVE-2007-3344: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in netjukebox 4.01b allow remote attackers to inject arbitrary web script or HTML via the 1 albumid, 2 order, 3 sort, 4 filter, and 5 genreid parameters to a index.php; and the 6 url parameter to b ridirect.php. NOTE: the attack also reveals the...