CVE-2009-2133

Multiple cross-site scripting XSS vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the 1 menu or 2 sort parameter to pivot/index.php, 3 the value of a check array parameter in a delete action to pivot/index.php, 4 the element name in a...

CVE-2009-2133

Multiple cross-site scripting XSS vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to inject arbitrary web script or HTML via the 1 menu or 2 sort parameter to pivot/index.php, 3 the value of a check array parameter in a delete action to pivot/index.php, 4 the element name in a...

CVE-2009-2133

Pivot is affected by multiple cross-site scripting (XSS) vulnerabilities in version 1.40.4 and 1.40.7. The issues allow remote attackers to inject arbitrary script/HTML via various parameters to pivot/index.php (and related actions) and related user/pivot pages. The provided sources enumerate the...