2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields...
CVE-2012-2604
CVE-2012-2604 corresponds to multiple XSS vulnerabilities in Bradford Network Sentry’s Administrative GuestAccess.jsp (Guest/Contractor access). The affected component is Bradford Network Sentry before version 5.3.3, where remote authenticated users can inject arbitrary web script or HTML via uns...