CVE-2012-3233

CVE-2012-3233 describes an XSS in Kayako Fusion 4.40.1148 via the file path in /__swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php using PATH_INFO . Public advisories note the vulnerability affected Kayako Fusion and were fixed by upgrading to 4.50.1581 ; exploitation requires tha...