CVE-2012-2638

The CVE-2012-2638 issue affects SmallPICT, impacting SmallPICT.cgi in SmallPICT versions prior to 2.7. It is a cross-site scripting (XSS) vulnerability that could allow a remote attacker to inject arbitrary web script or HTML, potentially leading to arbitrary script execution in a user’s browser....

CVE-2012-2638: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...