CVE-2009-1448

Cross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Date published : 2009-04-27

http://jvn.jp/en/jp/JVN82744714/index.html

http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000019.html