CVE-2008-3850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Accellion File Transfer FTA70135 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to courier/forgotpassword.html...