CVE-2012-1575 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages.

Reference

http://rhn.redhat.com/errata/RHSA-2012-0476.html http://rhn.redhat.com/errata/RHSA-2012-0477.html http://secunia.com/advisories/48810 http://secunia.com/advisories/48829 http://www.securityfocus.com/bid/53000 http://www.securitytracker.com/id?1026921 https://bugzilla.redhat.com/attachment.cgi?id=571986 https://bugzilla.redhat.com/show_bug.cgi?id=805712 https://exchange.xforce.ibmcloud.com/vulnerabilities/74844 https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html