EUVD-2013-2450

Malware in sbrugna...

CVE-2013-2504

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...

Cross site scripting

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2013-2504

CVE-2013-2504 is a documented XSS in Matrix42 Service Desk (Service Store 5.3 SP3 / 5.33.946.0). The vulnerability occurs in SPS/Portal/default.aspx and allows remote attackers to inject arbitrary web script or HTML via the query string. Exploitation is reported via public advisories and an explo...

CVE-2013-2504

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...

PT-2013-3827

Name of the Vulnerable Software and Affected Versions Matrix42 Service Store version 5.3 SP3 aka 5.33.946.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the query string in the SPS/Portal/default.aspx page of the Service...

CVE-2013-2504: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...

Matrix42 Service Store - 'default.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/59290/info Matrix42 Service Store is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...