CVE-2007-1872
Cross-site scripting (XSS) vulnerability in toendaCMS 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search id.
Date published : 2007-04-13
http://www.securityfocus.com/bid/23453
http://www.securityfocus.com/archive/1/465487/100/0/threaded
