CVE-2014-0330: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...