CVE-2012-5341

CVE-2012-5341 affects Otterware StatIt 4, where statistik.php is vulnerable to XSS via (1) action, (2) show in stat_tld, or (3) order in stat_abfragen, allowing remote script/HTML injection. Exploitation details are not provided in the supplied documents; no remediation is listed here.

PT-2012-5936

Name of the Vulnerable Software and Affected Versions Otterware StatIt version 4 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters in the statistik.php file. The vulnerable parameters include the action parameter, the show parameter in a...

CVE-2012-5341: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in statistik.php in Otterware StatIt 4 allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter, 2 show parameter in a stattld action, or 3 order parameter in a statabfragen action...