6 matches found
EUVD-2018-9704
Malware in sbrugna...
Aryanic HighPortal Cross-Site Scripting Vulnerability
Aryanic HighPortal is an enterprise portal system based on Java and ASP.NET. A cross-site scripting vulnerability exists in Aryanic HighPortal version 12.5. A remote attacker can exploit this vulnerability by adding tags to inject arbitrary web script or HTML...
CVE-2018-17964
Aryanic HighPortal 12.5 has XSS via an Add Tags action...
Deserialization of untrusted data
Aryanic HighPortal 12.5 has XSS via an Add Tags action...
CVE-2018-17964
CVE-2018-17964 affects Aryanic HighPortal 12.5. The vulnerability is a Cross‑Site Scripting (XSS) flaw that can be triggered via the Add Tags action, enabling injection of arbitrary script/HTML. Public sources in CNVD/NVD describe HighPortal 12.5 as vulnerable to XSS, with the remote attacker abl...
