PT-2011-4577

Name of the Vulnerable Software and Affected Versions Sonexis ConferenceManager version 9.2.11.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through several parameters in...

CVE-2011-3687: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inject arbitrary web script or HTML via 1 the txtConferenceID parameter to HostLogin.asp, 2 the txtConferenceID parameter to ParticipantLogin.asp, 3 the acp parameter to ForgotPIN.asp...