Vulnerabilities > Intesync > Miniweb > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2010-01-04 | CVE-2009-4552 | Cross-Site Scripting vulnerability in Intesync Miniweb 2.0 Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. | 4.3 |
2009-09-25 | CVE-2009-3420 | Cross-Site Scripting vulnerability in Intesync Miniweb 2.0 Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the (1) begin parameter and the (2) PATH_INFO. | 4.3 |