CVE-2012-1048

CVE-2012-1048 describes a cross-site scripting (XSS) vulnerability in the web admin page: communityplusplus/www/administrator.php of the eFront Community++ edition (version 3.6.10, and possibly other editions). The issue allows remote attackers to inject arbitrary web script or HTML via the filte...