CVE-2012-1214: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

PT-2012-3137

Name of the Vulnerable Software and Affected Versions Yoono Desktop Application versions prior to 1.8.21 Description A cross-site scripting XSS issue exists in the Add friends module, allowing remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" actio...

CVE-2012-1215: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

PT-2012-3138

Name of the Vulnerable Software and Affected Versions Yoono extension versions prior to 7.7.8 Description A cross-site scripting XSS issue exists in the Add friends module of the Yoono extension, allowing remote attackers to inject arbitrary web script or HTML via the create field in a "Create a...