CVE-2012-6369

https://notcve.org/view.php?id=CVE-2012-6369

28 Dec 2012 — Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el Sistema de Solución de Problemas en AgileBits 1Password v3.9.9 podría permitir a atacantes remotos inyectar secuencias de comandos web o HTML a ... • http://packetstormsecurity.org/files/118467/Agilebits-1Password-3.9.9-Cross-Site-Scripting.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •