CVE-2006-1968

CVE-2006-1968 describes a cross-site scripting (XSS) vulnerability in KCScripts News Publisher (Portal Pack 6.0 and earlier) affecting the news/NsVisitor.cgi component. The issue arises from the sort_order parameter, allowing remote attackers to inject arbitrary web script or HTML. Public sources...