CVE-2005-0914

Affected software : CPG Dragonfly 9.0.2.0 (also referenced as CPG-Nuke CMS in connected data). Vulnerability : Multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via (1) the profile parameter to index.php or (2) the cat parameter. Root cau...