CVE-2006-5799

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters.

Date published : 2006-11-08

http://www.securityfocus.com/bid/20908

http://marc.info/?l=bugtraq&m=116266150514762&w=2