CVE
- Id
- 40941
- CVE No.
- CVE-2009-3506
- Status
- Candidate
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the (1) cook_user parameter to index.php and the (2) name parameter to modules.php.
- Phase
- Assigned (20091001)
- Votes
- None (candidate not yet proposed)
- Comments