CVE-2016-6204

CVE-2016-6204 describes a Cross-Site Scripting (XSS) vulnerability in the integrated web server of Siemens SINEMA Remote Connect Server (all versions before 1.2). The issue allows an attacker to inject script/HTML via a crafted URL, with remote exploitation possible and potential for read-access ...