CVE-2005-1634 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) anzahl_beitraege parameter to jgs_portal.php (2) year parameter to jgs_portal_statistik.php (3) year parameter to jgs_portal_beitraggraf.php (4) tag parameter to jgs_portal_viewsgraf.php (5) year parameter to jgs_portal_themengraf.php (6) year parameter to jgs_portal_mitgraf.php (7) id parameter to jgs_portal_sponsor.php or (8) the Accept-Language header to jgs_portal_log.php. NOTE: this issue may stem from the same core problem as CVE-2005-1633.

Reference

http://marc.info/?l=bugtraq&m=111627681218415&w=2