PT-2012-3637

Name of the Vulnerable Software and Affected Versions Webfolio CMS versions 1.1.4 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the First name, Last name, or Email fields in the webfolio/admin/users/edit endpoint. Recommendations For Webfolio...

CVE-2012-1899: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 First name, 2 Last name or 3 Email required fields...