CVE-2007-1280

The CVE-2007-1280 entry describes an XSS vulnerability in Adobe RoboHelp X5, X6, and RoboHelp Server 6. The issue allows remote attackers to inject arbitrary script/HTML via a URL that includes a # (hash) in the path, demonstrated with en/frameset-7.html and potentially other vectors involving te...

PT-2007-2697 · Adobe · Robohelp +1

Name of the Vulnerable Software and Affected Versions: Adobe RoboHelp versions X5, 6 Adobe RoboHelp Server version 6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a URL after a hash in the URL path. This can be demonstrated using...

Adobe RoboHelp - Frameset-7.HTML Cross-Site Scripting

source: https://www.securityfocus.com/bid/23878/info RoboHelp is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Adobe RoboHelp - Frameset-7.HTML Cross-Site Scripting

Adobe RoboHelp - Frameset-7.HTML Cross-Site Scripting source: https://www.securityfocus.com/bid/23878/info RoboHelp is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...