CVE-2009-1457

CVE-2009-1457 describes a cross-site scripting (XSS) vulnerability in the player.php component of Nuke Evolution Xtreme 2.x, exploitable via the defaultVisualExt parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents confirm the affected produ...