44 matches found
CVE-2014-1237
Cross-site scripting XSS vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter...
CVE-2014-1237
Cross-site scripting XSS vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter...
CVE-2014-1237
CVE-2014-1237: XSS in synetics i-doit Pro prior to 1.2.4. The vulnerability arises from insufficient encoding of user-supplied data, allowing remote attackers to inject arbitrary web script or HTML via the call parameter. Affected: i-doit Pro before 1.2.4 (and likely earlier versions per advisory...