CVE-2012-5776

CVE-2012-5776 relates to multiple XSS vulnerabilities in Dokeos 2.1.1, specifically in the profile handling path (main/auth/profile.php) via parameters named for the extra_ set. The root cause is input handling that allows injected script code to be reflected in the user’s browser. Affected produ...