rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-4981 
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4982 
SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4983 
SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4984 
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4985 
Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4986 
SQL injection vulnerability in detail.php in Simple Document Management System (SDMS) allows remote attackers to execute arbitrary SQL commands via the doc_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4987 
SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4988 
PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPL[path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4989 
SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4990 
SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4991 
SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4992 
SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4993 
SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4994 
SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the detailed_results parameter to search_jobs.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4995 
SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offer_view action to index.php, a different vector than CVE-2007-4506.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4996 
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-4997 
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-4998 
PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-4999 
SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-5000 
SQL injection vulnerability in login/login_index.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter (aka Username field) in a do_login action.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5001 
SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-5002 
Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-5003 
SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-01T22:00:00.000Z
CVE-2010-5004 
SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to execute arbitrary SQL commands via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5005 
Cross-site scripting (XSS) vulnerability in members/profileCommentsResponse.php in Rayzz Photoz allows remote attackers to inject arbitrary web script or HTML via the profileCommentTextArea parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5006 
SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5007 
Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5008 
SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5009 
SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5010 
Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5011 
SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5012 
SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5013 
SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5014 
SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the ladder[id] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5015 
SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5016 
SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the match parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5017 
SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL commands via the account parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5018 
Cross-site scripting (XSS) vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5019 
SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5020 
SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5021 
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5022 
SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5023 
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5024 
SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the user_id parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5025 
Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web script or HTML via the fld_path parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5026 
SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5027 
Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5028 
SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5029 
SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5030 
Cross-site scripting (XSS) vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter in a web action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5031 
Cross-site scripting (XSS) vulnerability in index.php in fileNice 1.1 allows remote attackers to inject arbitrary web script or HTML via the sstring parameter (aka the Search Box).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5032 
SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5033 
SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5034 
SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5035 
Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka the search field).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5036 
SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5037 
SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5038 
PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5039 
SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter (aka the UserName field).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5040 
PHP remote file inclusion vulnerability in nucleus/plugins/NP_gallery.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIR_NUCLEUS parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5041 
SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5042 
Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid[] parameter in an editItem action to administrator/index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5043 
SQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid[] parameter in an editItem action to administrator/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5044 
SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5045 
Cross-site scripting (XSS) vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-02T21:00:00.000Z
CVE-2010-5046 
Cross-site scripting (XSS) vulnerability in admin.php in ecoCMS allows remote attackers to inject arbitrary web script or HTML via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z
CVE-2010-5047 
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z
CVE-2010-5048 
Cross-site scripting (XSS) vulnerability in admin.jcomments.php in the JoomlaTune JComments (com_jcomments) component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z
CVE-2010-5049 
SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the nav_time parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z
CVE-2010-5050 
Cross-site scripting (XSS) vulnerability in jsp/admin/tools/remote_share.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z
CVE-2010-5051 
Cross-site scripting (XSS) vulnerability in admin/core/admin_func.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z
CVE-2010-5052 
Cross-site scripting (XSS) vulnerability in admin/components.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the val[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z
CVE-2010-5053 
SQL injection vulnerability in the XOBBIX (com_xobbix) component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a prod_desc action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z
CVE-2010-5054 
Cross-site scripting (XSS) vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-11-23T01:00:00.000Z