CVE-2012-1110

Multiple cross-site scripting XSS vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user, 2 email, 3 email2, 4 f17zip, or 5 agree parameter to join.php; 6 PATHINFO, 7 st, 8 f17city, 9 f17country, 10 f17state, 11 f17zip, 12 f19, 13...

CVE-2012-1110

CVE-2012-1110 describes multiple cross-site scripting (XSS) flaws in Etano 1.22 and earlier. The vulnerabilities affect the web application via a large set of input points: join.php parameters (user, email, email2, f17_zip, agree); search.php parameters (PATH_INFO, st, f17_city, f17_country, f17_...