PT-2012-5641

Name of the Vulnerable Software and Affected Versions FlatnuX CMS versions 2012-03.08 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the title en, summary en, or body en parameters in a submitnews action to the "news module" API endpoint...

CVE-2012-4892: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 titleen, 2 summaryen, or 3 bodyen parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890. NOTE...