CVE-2007-5370

The CVE-2007-5370 entry describes multiple cross-site scripting (XSS) vulnerabilities in NetWin DNewsWeb (DNews News Server) via the CGI binary cgi-bin/dnewsweb.exe, exploitable with the parameters (1) group or (2) utag. The affected component is the NetWin DNewsWeb server; the underlying issue i...