CVE-2014-9433: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in cms/frontcontent.php in Contenido before 4.9.6, when advanced mod rewrite AMR is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 idart, 2 lang, or 3 idcat parameter...

PT-2014-9010

Name of the Vulnerable Software and Affected Versions Contenido versions prior to 4.9.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via the idart, lang, or idcat parameters in the cms/front content.php file when advanced mod rewrite AMR is disabled...