Cross-site scripting (XSS) vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the t_login parameter of footer.php.
- http://marc.info/?l=bugtraq&m=112879353805769&w=2
- http://securityreason.com/securityalert/70
No PoCs found on GitHub currently.