CVE-2014-2965

Cross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter.

Date published : 2014-07-03

http://www.securityfocus.com/bid/68143

http://www.kb.cert.org/vuls/id/849500