CVE-2007-5648 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in rnote.php in rNote 0.9.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) d or the (2) u parameter.

Reference

http://osvdb.org/38204 http://secunia.com/advisories/27404 http://www.lezr.com/exploits/id/84 http://www.securityfocus.com/bid/26140