PT-2022-18793

Name of the Vulnerable Software and Affected Versions Halo version 1.5.0 Description A stored cross-site scripting XSS issue was found in Halo. The issue is related to the "/admin/index.html/system/tools" API endpoint. This could potentially allow for malicious script execution. Recommendations F...

CVE-2022-28074: Improper Neutralization of Input During Web Page Generation

Halo-1.5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via \admin\index.html/system/tools...

PT-2019-18698

Name of the Vulnerable Software and Affected Versions MOBOTIX S14 version MX-V4.2.1.61 Description An issue was discovered where the default management application is delivered over cleartext HTTP with Basic Authentication. This is demonstrated by the "/admin/index.html" API endpoint...

CVE-2008-0218: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2003-1522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to the admin/index.html page...