CVE-2012-6369: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action...

PT-2012-6272

Name of the Vulnerable Software and Affected Versions 1Password version 3.9.9 Description A cross-site scripting XSS issue exists in the Troubleshooting Reporting System feature. This could allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is...