CVE-2012-2985

Cross-site scripting XSS vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the UploadID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in InsertDocument.aspx in CuteSoft Cute Editor 6.4 allows remote authenticated users to inject arbitrary web script or HTML via the UploadID parameter...

CVE-2012-2985

CVE-2012-2985 is an XSS in CuteSoft Cute Editor 6.4’s InsertDocument.aspx where the GET/POST parameter _UploadID lets remote authenticated users inject script/HTML. The vulnerability is indicated by multiple sources (NVD, Red Hat, CVE lists, CERT entry), all describing a reflected XSS with potent...

CuteSoft Cute Editor 6.4 reflected cross site scripting

Overview CuteSoft Cute Editor 6.4, and possibly other verions, contains a reflected cross-site scripting XSS CWE-79 vulnerability. Description CuteSoft Cute Editor 6.4 has been reported to contain a reflected cross-site scripting XSS CWE-79 vulnerability. The GET request parameter called UploadID...