CVE-2006-5074
Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter.
Date published : 2006-09-28
http://www.securityfocus.com/bid/20221
http://www.securityfocus.com/archive/1/447015/100/0/threaded