CVE-2007-5052

Vigile CMS 1.8 contains multiple cross-site scripting (XSS) vulnerabilities in index.php and the download module. An attacker can inject arbitrary script or HTML via the wiki module by manipulating (1) the title parameter or (2) a PATH_INFO containing a title= sequence, or via the download module...