Dell SonicWall EMail Security Appliance Multiple HTML Injection Vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the uploadPatch parameter to the System/Advanced page settingsadvanced.html or 2 the uploadLicenses parameter...

CVE-2014-2879

Dell SonicWall Email Security 7.4.5 and earlier suffer multiple cross-site scripting (XSS) vulnerabilities in the web interface. Remote authenticated administrators can inject arbitrary web script or HTML via the uploadPatch parameter on System/Advanced (settings_advanced.html) or the uploadLicen...