PT-2014-6354

Name of the Vulnerable Software and Affected Versions Open-Xchange OX AppSuite versions prior to 7.4.2-rev33 Open-Xchange OX AppSuite versions 7.6.x prior to 7.6.0-rev16 Description A cross-site scripting XSS issue exists in the backend of Open-Xchange OX AppSuite, allowing remote attackers to...

CVE-2014-5234: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the backend in Open-Xchange OX AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via a folder publication name...