CVE-2015-4268

Cisco Identity Services Engine (ISE) Infra Admin UI is affected by CVE-2015-4268, with XSS vulnerabilities in ISE versions 1.2(1.198) and 1.3(0.876). The root cause is insufficient input validation of certain HTTP GET/POST parameters, enabling remote attackers to inject arbitrary web script or HT...

CVE-2015-4268: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine ISE 1.21.198 and 1.30.876 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCus16052...

Unfixed XSS vulnerability at www.uazone.net

Security researcher INfRA, has submitted on 08/09/2008 a cross-site-scripting XSS vulnerability affecting www.uazone.net, which at the time of submission ranked 262307 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2008. It is currently...