PT-2011-2620

Name of the Vulnerable Software and Affected Versions Janrain Engage module versions 6.x-1.3 Description The issue allows remote authenticated users to conduct cross-site scripting XSS attacks and possibly execute arbitrary PHP code by causing a crafted avatar to be downloaded from an external...