CVE-2014-8381

Multiple cross-site scripting XSS vulnerabilities in Megapolis.Portal Manager allow remote attackers to inject arbitrary web script or HTML via the 1 dateFrom or 2 dateTo parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Megapolis.Portal Manager allow remote attackers to inject arbitrary web script or HTML via the 1 dateFrom or 2 dateTo parameter...

CVE-2014-8381

CVE-2014-8381 affects Megapolis.Portal Manager with multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script via dateFrom or dateTo parameters. Core detail across sources shows web-app input handling flaw enabling script/HTML injection, resulting in partial integrity impa...