CVE-2006-0593

PHP-Fusion contains a cross-site scripting (XSS) vulnerability (CVE-2006-0593) in version prior to 6.00.304. The flaw allows remote attackers to inject arbitrary web script or HTML through two fields: shout_name in shoutbox_panel.php and comments in comments_include.php. Impact per the sources is...