CVE-2012-1788: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the 1 cusemail parameter in a custlostpw action; or 2 helpname, 3 helpemail, 4 helpwebsite, or 5 helpexampleurl parameters in an...