CVE-2011-5142

Multiple cross-site scripting XSS vulnerabilities in Open Business Management OBM 2.4.0-rc13 and probably earlier allow remote attackers to inject arbitrary web script or HTML via the 1 tfdelegation, 2 tfip, or 3 tfname parameter in a search action to host/hostindex.php; 4 login parameter to...

CVE-2011-5142

Open Business Management (OBM) 2.4.0-rc13 and possibly earlier versions are affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via several parameters in OBM’s web interfaces: tf_delegation, tf_ip, and tf_name in search action to host...