CVE-2018-19812: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/SubFolderPackages.jsp" has reflected XSS via the GroupId parameter...

CVE-2018-19809: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter...

CVE-2018-19775: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters...

CVE-2018-19814: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Subscriptions.jsp" has reflected XSS via the ConnPoolName or GroupId parameter...

CVE-2018-19813: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Subscribers.jsp" has reflected XSS via the ConnPoolName or GroupId parameter...

CVE-2018-19767: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters...

CVE-2018-19765: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters...

CVE-2018-19773: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters...

CVE-2018-19810: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/GroupMove.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07232)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the PresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTML with the help of...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07223)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the EditCurrentPresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary code with the help of th...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07225)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the PresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTML with the help of...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07218)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Subscribers.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the help of the The...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07214)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/AdminAuthorizationFrame.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to A remote attacker c...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07226)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the /VPortal/mgtconsole/GroupCopy.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary Web code with the...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07222)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the /VPortal/mgtconsole/SubFolderPackages.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07228)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the Variables.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07219)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Subscriptions.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the help of the The...

VistaPortal SE 5.1 Cross Site Scripting

Complete list: CVE-2018-19649, CVE-2018-19765, CVE-2018-19766, CVE-2018-19767, CVE-2018-19768, CVE-2018-19769, CVE-2018-19770, CVE-2018-19771, CVE-2018-19772, CVE-2018-19773, CVE-2018-19774, CVE-2018-19775, CVE-2018-19809, CVE-2018-19810, CVE-2018-19811, CVE-2018-19812, CVE-2018-19813,...

CVE-2015-8298: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL commands via the 1 loginpassword, 2 loginusername, 3 zusatzlicher, or 4 groupid parameter to index.htm, or the 5 rxtec cookie to index.htm...