CVE-2014-9468: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in InstantASP InstantForum.NET 4.1.3, 4.1.2, 4.1.1, 4.0.0, 4.1.0, and 3.4.0 allow remote attackers to inject arbitrary web script or HTML via the SessionID parameter to 1 Join.aspx or 2 Logon.aspx...

PT-2015-4229

Name of the Vulnerable Software and Affected Versions InstantASP InstantForum.NET versions 3.4.0 through 4.1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the SessionID parameter to API endpoints such as "Join.aspx" or "Logon.aspx". This can lead to...