CVE-2012-1303: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the 1 datafile or 2 settingsfile parameter to ampie.swf; the message element in the chartdata parameter to 3 amcolumn.swf, 4 amline.swf, 5 amradar.swf, or 6...