CVE-2012-1209

Cross-site scripting XSS vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter...

CVE-2012-1208

Multiple cross-site scripting XSS vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 report parameter to blog/settings or 2 error parameter to users/index...

CVE-2012-1209: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter...

CVE-2012-1208: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 report parameter to blog/settings or 2 error parameter to users/index...

PT-2012-3132

Name of the Vulnerable Software and Affected Versions Fork CMS versions 3.2.4 through 3.2.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the highlight parameter in the backend/core/engine/base.php file. This could potentially lead...