PT-2014-5583

Name of the Vulnerable Software and Affected Versions Kobo Multifunctional MailForm Free versions 2014/1/28 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header. This can lead to the execution of malicio...

CVE-2014-3894: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...

Multifunctional MailForm Free vulnerable to cross-site scripting

Overview Multifunctional MailForm Free provided by PHP Kobo contains a cross-site scripting vulnerability. Multifunctional MailForm Free contains an issue in processing HTTP Referer headers, which may cause cross-site scripting. Impact By opening a specially crafted HTML document, an arbitrary...

JVN#41028866: Multifunctional MailForm Free vulnerable to cross-site scripting

Multifunctional MailForm Free contains an issue in processing HTTP Referer headers, which may cause cross-site scripting. Impact By opening a specially crafted HTML document, an arbitrary sctipt may be executed. Solution Update the software Update to the latest version according to the informatio...