Security Advisory
CVE-2007-3578
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed comments, which allows remote attackers to inject arbitrary web script.