2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2009-4995
CVE-2009-4995 describes a cross-site scripting (XSS) vulnerability in SmarterTools SmarterTrack, specifically in frmTickets.aspx. The issue allows remote attackers to inject arbitrary script or HTML via the email address field in SmarterTrack before version 4.0.3504. The public description notes ...