CVE-2012-5175

CVE-2012-5175 concerns an XSS vulnerability in KENT-WEB ACCESS REPORT (v4.2 and earlier). The issue arises in processing of access-log data, enabling remote attackers to inject arbitrary web script or HTML that may execute in a user’s browser. Affected product: ACCESS REPORT by KENT-WEB; versions...

CVE-2012-5176

The CVE-2012-5176 entry corresponds to a cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT versions 5.02 and earlier. The root cause is a flaw in how tags are embedded into the web page, which permits remote attackers to inject arbitrary script or HTML via those embedding vectors...

CVE-2012-5175

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data...

CVE-2012-5176

Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding...

KENT-WEB ACCESS REPORT vulnerable to cross-site scripting

Overview ACCESS REPORT provided by KENT-WEB contains a cross-site scripting vulnerability. ACCESS REPORT provided by KENT-WEB is a software to analyze web access logs. ACCESS REPORT contains a cross-site scripting vulnerability. This is caused by a particular method in which tags are embedded int...

KENT-WEB ACCESS REPORT vulnerable to cross-site scripting

Overview ACCESS REPORT provided by KENT-WEB contains a cross-site scripting vulnerability. ACCESS REPORT provided by KENT-WEB is a software to analyze web access logs. ACCESS REPORT contains an issue in the processing of access logs, which may lead to a cross-site scripting vulnerability. Note th...

JVN#68830017: KENT-WEB ACCESS REPORT vulnerable to cross-site scripting

ACCESS REPORT provided by KENT-WEB is a software to analyze web access logs. ACCESS REPORT contains an issue in the processing of access logs, which may lead to a cross-site scripting vulnerability. Note that this vulnerability is different from JVN23563149. Impact An arbitrary script may be...

CVE-2012-2643

Cross-site scripting XSS vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry...

Cross site scripting

Cross-site scripting XSS vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry...

CVE-2012-2643

CVE-2012-2643 affects YY-BOARD by KENT-WEB: an XSS vulnerability exists in handling web form entries, exploitable through a crafted form input to execute arbitrary script/HTML in a user’s browser. The issue is described as occurring in YY-BOARD prior to version 6.4 and is due to improper handling...

CVE-2012-2643

Cross-site scripting XSS vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry...

CVE-2012-2637

Cross-site scripting XSS vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie...

CVE-2012-2636

Cross-site scripting XSS vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie...

CVE-2012-2636

CVE-2012-2636 concerns a cross-site scripting (XSS) vulnerability in WEB PATIO (KENT-WEB) version 4.04 and earlier. Multiple connected sources confirm the flaw enables an attacker to cause arbitrary web-script or HTML execution in a victim’s browser through unspecified vectors in WEB PATIO’s hand...

CVE-2012-2637

CVE-2012-2637 affects WEB PATIO software (WEB PATIO Ver.4.04 and earlier). The vulnerability is a cross-site scripting (XSS) issue arising from how cookies are handled, enabling remote attackers to inject arbitrary script/HTML via a crafted cookie. Impact per sources is browser-executable arbitra...

CVE-2012-2636

Cross-site scripting XSS vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2637

Cross-site scripting XSS vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie...

CVE-2012-1246

Cross-site scripting XSS vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie...

CVE-2012-1247

Cross-site scripting XSS vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML by leveraging support for Cascading Style Sheets CSS expressions...