CVE-2011-0486: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cognos.cgi in IBM Cognos 8 Business Intelligence BI 8.4.1 before FP1 allows remote attackers to inject arbitrary web script or HTML via the pathinfo parameter...