CVE-2005-2042

The CVE-2005-2042 entry concerns an XSS vulnerability in ajax-spell prior to 1.8. The issue arises from allowing injection of arbitrary script/HTML via event handlers (e.g., onmouseover) in HTML tags, enabling remote attacker-controlled script execution. Affected component: ajax-spell (web UI) be...

CVE-2005-2042

Cross-site scripting XSS vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags...

CVE-2024-33471

An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in plaintext via a crafted AJAX request. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...