CVE-2014-7290

CVE-2014-7290 is an XSS vulnerability in Atlas Systems Aeon 3.5 and 3.6. The issue allows remote attackers to inject arbitrary scripts via the Action or Form parameter to aeon.dll. Affected product: Aeon (special collections circulation software). Root cause: cross-site scripting vulnerability in...

Atlas Systems Aeon 3.5 / 3.6 Cross Site Scripting

CVE-2014-7290 Atlas Systems Aeon XSS Cross-Site Scripting Vulnerability Exploit Title: Atlas Systems Aeon XSS Vulnerability Product: Aeon Vendor: Atlas Systems Vulnerable Versions: 3.6 3.5 Tested Version: 3.6 Advisory Publication: Nov 12, 2014 Latest Update: Nov 12, 2014 Vulnerability Type:...