CVE-2011-1838

Multiple cross-site scripting XSS vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a 1 view script or 2 login script...

CVE-2011-1838

Vulnerability summary: TWiki before 5.0.2 contains multiple XSS flaws in TemplateLogin.pm, exploitable via the origurl parameter in both the view and login scripts. The OpenVAS NASL entry and CVE records corroborate the vulnerable module and vector. Impact (as described): cross-site scripting cou...

CVE-2011-1838: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a 1 view script or 2 login script...

PT-2011-3400

Name of the Vulnerable Software and Affected Versions TWiki versions prior to 5.0.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a 1 view script or...