January, 2008
Submitted by xqus on Tue, 01/01/2008 - 18:07
I just posted this to Bugtraq, so I'll post it here to.
------------------------------------------------------------------------
Cross-Site Scripting (XSS) in phpWebSite 1.4.0 search
------------------------------------------------------------------------
Author: Audun Larsen (larsen at xqus dot com)
Date: Dec 29, 2007
--AFFECTED SOFTWARE--------------------------
Name: phpWebSite
Version: 1.4.0
Release date: Dec 11, 2007
Developed by the Web Technology Group at Appalachian State University,
phpWebSite provides a complete web site content management system ( CMS ).