EUVD-2012-1792

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the 1 url bar or 2 picture bar...

CVE-2012-1782

CVE-2012-1782 concerns OSQA 3b, specifically the questions/ask path, where multiple cross-site scripting (XSS) vulnerabilities exist. The available connected documents confirm that remote attackers can inject arbitrary web script or HTML via the (1) URL bar or (2) picture bar. The root cause is d...