PT-2012-3636

Name of the Vulnerable Software and Affected Versions Wolf CMS versions 0.75 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the username, useremail, or userusername parameters in the wolfcms/admin/user/add endpoint. Recommendations For version...

CVE-2012-1898: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 useremail, or 3 userusername parameters...