CVE-2014-1454

Pearson eSIS Enterprise Student Information System message board has stored XSS due to improper validation of user input...

Pearson eSIS HTML注入漏洞

Bugtraq ID:66673 CVE ID:CVE-2014-1454 Pearson eSIS Enterprise Student Information System是一个相关学生信息系统的管理系统。 Pearson eSIS在实现上存在HTML注入漏洞，成功利用后可使攻击者在受影响浏览器上下文中注入并执行HTML和脚本代码。 0 pearsonschoolsystems eSIS 目前没有详细解决方案： www.pearsonschoolsystems.com/products/esis...

Pearson eSIS Enterprise Student Information System XSS

Advisory ID: hag201477 Product: Pearson eSIS Enterprise Student Information System Vendor: PearsonVue Vulnerable Versions: Any version Advisory Publication: April 06, 2014 Vendor Notification: March 05, 2014 Public Disclosure: April 06, 2014 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...