CVE-2012-5296: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 approve.asp, 2 delete.asp, 3 edit.asp, or 4 edit2.asp...

PT-2012-5895

Name of the Vulnerable Software and Affected Versions Mavili Guestbook affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the id parameter to...