CVE-2013-5005: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ajaxRequest/methodCall.do in Tripwire Enterprise 8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 mtargetclassname, 2 mtargetmethodname, or 3 mrequestcontextparams parameters...