CVE-2010-0695
Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via the nav_id parameter.
Date published : 2010-02-23
http://www.securityfocus.com/bid/38235
http://packetstormsecurity.org/1002-exploits/basiccms-sqlxss.txt