CVE-2004-2085

CVE-2004-2085 affects Brad Fears phpCodeCabinet, versions 0.4 and earlier. The vulnerability is a set of cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML through multiple parameters in several scripts/pages: (1) comments.php (sid), (2) category.p...