PT-2015-5564

Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server version 8.2b Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters. The...

CVE-2015-2043: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the 1 bt, 2 variable, or 3 et parameter to myspeed/db/historyitem...

MyConnection Server 8.2b Cross Site Scripting

Title: MyConnection Server 8.2b GET Reflected XSS Severity: High CVE-ID: CVE-2015-2043 Release Date: 23 February 2015 Author: Kenneth F. Belva Websites: http://silverbackventuresllc.com http://xssWarrior.com http://securitymaverick.com Twitter: @infosecmaverick Contact: Please use website contact...

MyConnection Server (MCS) 9.7i Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Author: 1N3 Website: http://treadstonesecurity.blogspot.ca Vender Website: http://www.visualware.com/ Affected Product: MyConnection Server Affected Version: 9.7i others may also be vulnerable ABOUT: MyConnection Server MCS delivers a broad...

CVE-2014-5113

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...

CVE-2014-5113

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...

CVE-2014-5113

CVE-2014-5113 describes multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 9.7i. The weakness arises on test.php where unsanitized GET parameters (including testtype, ver, cm, map, lines, pps, bpp, codec, provtext, provtextextra, provlink, duration) can be explo...

CVE-2014-5113: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...

PT-2014-6290

Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server version 9.7i Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via various parameters in the...

MyConnection Server (MCS) 9.7i Cross Site Scripting

Author: 1N3 Website: http://treadstonesecurity.blogspot.ca Vender Website: http://www.visualware.com/ Affected Product: MyConnection Server Affected Version: 9.7i others may also be vulnerable ABOUT: MyConnection Server MCS delivers a broad range of support managed automated and user initiated...