PT-2014-5804

Name of the Vulnerable Software and Affected Versions Openfiler version 2.99 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters, including TinkerAjax to "uptime.html", and remote authenticated users to inject arbitrary web script or HTML vi...

CVE-2014-4309: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the 1 TinkerAjax parameter to uptime.html, or remote authenticated users to inject arbitrary web script or HTML via the 2 MaxInstances, 3 PassivePorts, 4 Port, 5...