CVE-2012-4567: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LetoDMS formerly MyDMS before 3.3.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in 1 inc/inc.ClassUI.php or 2 out/out.DocumentNotify.php...

PT-2017-5154

Name of the Vulnerable Software and Affected Versions: LetoDMS versions prior to 3.3.8 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in certain files...