Vulnerabilities > Intesync > Miniweb > Medium

DATE CVE VULNERABILITY TITLE RISK
2010-01-04 CVE-2009-4552 Cross-Site Scripting vulnerability in Intesync Miniweb 2.0
Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
network
intesync CWE-79
4.3
2009-09-25 CVE-2009-3420 Cross-Site Scripting vulnerability in Intesync Miniweb 2.0
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter and the (2) PATH_INFO.
network
intesync CWE-79
4.3