4 matches found
SUSE CVE-2014-9714
Cross-site scripting XSS vulnerability in the WddxPacket::recursiveAddVar function in HHVM aka the HipHop Virtual Machine before 3.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted string to the wddxserializevalue function...
CVE-2014-9714
Cross-site scripting XSS vulnerability in the WddxPacket::recursiveAddVar function in HHVM aka the HipHop Virtual Machine before 3.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted string to the wddxserializevalue function...
PT-2015-4362
Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.5.0 Description A cross-site scripting issue exists due to a flaw in the WddxPacket::recursiveAddVar function. This allows remote attackers to inject arbitrary web script or HTML via a crafted string to the wddx...
CVE-2014-9714: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the WddxPacket::recursiveAddVar function in HHVM aka the HipHop Virtual Machine before 3.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted string to the wddxserializevalue function...