PT-2012-3533

Name of the Vulnerable Software and Affected Versions OSQA version 3b Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the 1 url bar or 2 picture bar. Recommendations For OSQA...

CVE-2012-1782: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the 1 url bar or 2 picture bar...