CVE-2012-4685

Arbor Networks Peakflow SP is affected by a cross-site scripting (XSS) vulnerability in which an attacker can inject arbitrary web script or HTML via the PATH_INFO to index. Affected product versions are Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.6.0 before patch 1. The issue ste...