CVE-2012-4739: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Barracuda SSL VPN before 2.2.2.203 2012-07-05 allow remote attackers to inject arbitrary web script or HTML via the 1 policyLaunching, 2 resourcePrefix, or 3 actionPath parameter in showUserResourceCategories.do; 4 list or 5 path parameter to...