3 matches found
CVE-2022-28074: Improper Neutralization of Input During Web Page Generation
Halo-1.5.0 was discovered to contain a stored cross-site scripting XSS vulnerability via \admin\index.html/system/tools...
CVE-2008-0218: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web script or HTML via the message parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2003-1522: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to the admin/index.html page...