CVE-2012-0988: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in config/dmsDefaults.php in KnowledgeTree 3.7.0.2 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 login.php, 2 admin.php, or 3 preferences.php...