CVE-2005-0485

CVE-2005-0485 affects paNews 2.0b4 (PHP Arena). The vulnerability is an XSS in the file comment.php via the showpost parameter, caused by insufficient input sanitization. Remote attackers can inject arbitrary HTML/script when a user visits a malicious link. The impact is described as standard cli...