CVE-2009-4972

The CVE pertains to SimpleID before version 0.6.5 where the login page (index.php) is vulnerable to Cross-Site Scripting via the s parameter. The flaw allows remote attackers to inject arbitrary script/HTML in the context of the affected web page, with no authentication required and no confidenti...