CVE-2012-1990

CVE-2012-1990 describes multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb (before 3.0.1) and Kerwin (before 6.0.1). The issues allow remote attackers to inject arbitrary web script or HTML via (1) the evtvariablename parameter in an evts.xml action to kw.dll, (2) un...

Kerweb / Kerwin Cross Site Scripting

Kerweb/Kerwin XSS vulnerabilities Severity: Moderate Vendor: Schneider Electrics Versions Affected: Kerweb...