CVE-2007-5648

CVE-2007-5648 describes multiple cross-site scripting (XSS) vulnerabilities in rnote.php of rNote 0.9.7.5, enabling remote attackers to inject arbitrary script or HTML via the d or u parameters. The NVD entry assigns a medium base score (4.3) with network access and no authentication required, pa...