Cross site scripting

Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web script or HTML via the lid parameter...

CVE-2006-0875

RunCMS 1.3a5 is affected by a cross-site scripting vulnerability in ratefile.php that allows remote attackers to inject arbitrary script or HTML via the lid parameter. Affected component: ratefile.php in RunCMS 1.3a5. Root cause: input handling leads to XSS. Impact: potential script execution in ...