CVE-2014-4738

Multiple cross-site scripting XSS vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 user/ldapuser/checkdlg or 2 user/radiususer/checkdlg...

CVE-2014-4738

Fortinet FortiWeb 5.x prior to 5.2.1 is affected by CVE-2014-4738 (XSS) in the web management interface URLs /user/ldap_user/check_dlg and /user/radius_user/check_dlg due to insufficient input validation. This allows remote attackers to inject arbitrary JavaScript in an administrative browser ses...

CVE-2014-4738: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FortiGuard FortiWeb 5.0.x, 5.1.x, and 5.2.x before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 user/ldapuser/checkdlg or 2 user/radiususer/checkdlg...

CVE-2014-1956

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Design/Logic Flaw

FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...

Crlf injection

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1956

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2014-1955

FortiWeb (Fortinet) FortiWeb 4.x/5.x is affected by CVE-2014-1955, a cross-site scripting (XSS) vulnerability present in versions prior to 5.0.3. The issue allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors. The NVD entry lists a CVSS v2 base score of 4.3 (Med...

CVE-2014-1956: Undefined Security Weakness

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2014-1955: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1957: Undefined Security Weakness

FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2014-1458

Cross-site scripting XSS vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1458: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web administration interface in FortiGuard FortiWeb 5.0.3 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors...