CVE-2012-1789: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 surname or 2 firstname parameters to modules/members/addmember.php; or 3 groupdescription or 4 groupname parameters to modules/groups/addgroupform.php...

PT-2012-3540

Name of the Vulnerable Software and Affected Versions Kongreg8 version 1.7.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerable parameters are surname and firstname i...