3 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration.html...
CVE-2017-13754: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration.html...
PT-2017-13076
Name of the Vulnerable Software and Affected Versions Wibu-Systems CodeMeter versions prior to 6.50b Description A cross-site scripting XSS issue exists in the "advanced settings - time server" module, allowing remote attackers to inject arbitrary web script or HTML via the server name field in t...