CVE-2018-1000528

GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...

CVE-2018-1000528: Improper Neutralization of Input During Web Page Generation

GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...

PT-2018-9425

Name of the Vulnerable Software and Affected Versions GONICUS GOsa versions before commit 56070d6289d47ba3f5918885954dcceb75606001 Description The issue concerns a Cross Site Scripting XSS vulnerability in the change password form, specifically in the html/password.php file. This vulnerability ca...