CVE-2014-4309

Multiple cross-site scripting XSS vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the 1 TinkerAjax parameter to uptime.html, or remote authenticated users to inject arbitrary web script or HTML via the 2 MaxInstances, 3 PassivePorts, 4 Port, 5...

CVE-2014-4309

CVE-2014-4309 affects Openfiler 2.99 with multiple XSS vulnerabilities. The issues enable injection of arbitrary script/HTML via numerous parameters across admin pages (uptime.html, admin/services_ftp.html, admin/system.html, admin/volumes_iscsi_targets.html, volumes_*) and via User-Agent headers...