CVE-2006-1562
Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) autor, (2) www, (3) temat, and (4) tresc parameters.
Date published : 2006-03-31
http://www.securityfocus.com/bid/17319
http://www.securityfocus.com/archive/1/430624/100/0/threaded