CVE-2007-2686

CVE-2007-2686 describes a Cross‑Site Scripting (XSS) vulnerability in Jetbox CMS 2.1. The flaw is in index.php, where an attacker can inject arbitrary web script or HTML via the login parameter in the sendpwd task. Affected product: Jetbox CMS 2.1. Reported impact per sources is XSS with potentia...