CVE-2006-0715
Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field.
Date published : 2006-02-15
http://www.securityfocus.com/bid/16647
http://www.securityfocus.com/archive/1/424958/100/0/threaded