CVE-2012-5684: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in the myaccount module to zpanel/...

PT-2014-2353

Name of the Vulnerable Software and Affected Versions ZPanel versions 10.0.1 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the inFullname parameter in an UpdateAccountSettings action in the my account module to "zpanel/...