CVE-2009-3950

Bractus SunTrack is affected by CVE-2009-3950, which has multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML through input fields across several pages: the title parameter in newprofile.html; the firstname, lastname, and company parameters in sig...