CVE-2012-3870: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 name or 2 description parameter...

PT-2012-5053

Name of the Vulnerable Software and Affected Versions Open Constructor version 3.12.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via the name or description paramet...