CVE-2012-1470

Multiple cross-site scripting XSS vulnerabilities in codeeditor.php in ocPortal before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 path or 2 line parameters...

CVE-2012-1470

CVE-2012-1470 describes multiple XSS vulnerabilities in ocPortal before 7.1.6, triggered via the code_editor.php endpoint when user-supplied values in the path or line parameters are reflected back to the browser. Exploitation allows remote attackers to inject arbitrary web script or HTML. The re...