CVE-2011-0280: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HP Power Manager HPPM 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the logType parameter to Contents/exportlogs.asp, 2 the Id parameter to Contents/pagehelp.asp, or the 3 SORTORD or 4 SORTCOL parameter t...