Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the projdoceditpage.php Project Documentation feature. An attacker can execute arbitrary code after uploading an attachment with a crafted filename. The code is...

Mail.ru: touch.mail.ru/messages - Stored XSS

XSS in touch.mail.ru image preview feature via crafted attachment filename...

Cross site scripting

Cross-site scripting XSS vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted attachment filename...

CVE-2015-0915

Cross-site scripting XSS vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted attachment filename...

CVE-2015-0915: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted attachment filename...