CVE-2013-0124

Multiple cross-site scripting XSS vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the 1 Number or 2 UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll...

CVE-2013-0124

CVE-2013-0124 concerns XSS vulnerabilities in the Askiaweb administration interface. Multiple cross-site scripting flaws allow remote attackers to inject arbitrary web script/HTML via the (1) Number parameter or (2) UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll. Affected product: ASKIA ask...

Askiaweb survey application contains multiple vulnerabilities

Overview The Askiaweb survey application contains multiple vulnerabilities. Description The Askiaweb survey application contains multiple vulnerabilities.CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2013-0123 The administration interface for the...