CVE

Id
28650  
CVE No.
CVE-2007-5293  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject arbitrary web script or HTML via the (1) err_msg parameter to error.php and the (2) content parameter to templates/simple/ia.php.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments