CVE-2012-0989

CVE-2012-0989 affects OneOrZero AIMS 2.8.0 Trial Edition build231211 (and possibly earlier). The vulnerability is a Cross‑site Scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. According to NVD, the base score is 4.3 (Medium) with ...