CVE-2012-4923

CVE-2012-4923 involves multiple cross-site scripting (XSS) flaws in the Endian Firewall 2.4 web interface. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via (1) the createrule parameter to dnat.cgi, (2) the addrule parameter to dansguardian.cgi, or (3) PATH_INF...