PT-2026-99137

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 1.6.0 Description An issue exists where the search parameter at the '/employee/employee-filter-view' endpoint is reflected via the jQuery .html method in the employee/templates/employee nav.html file without proper HT...

CVE-2010-4745

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2010-4745

CVE-2010-4745 is an XSS vulnerability in PHPXref (nav.html) prior to version 0.7.1, where an attacker could inject script/HTML via the query string. Affected component: PHPXref navigation page; root cause: lack of input sanitization on query parameters. Impact stated: cross-site scripting; no exp...

CVE-2010-4745: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

PT-2011-1695

Name of the Vulnerable Software and Affected Versions PHPXref versions prior to 0.7.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the query string, which can lead to cross-site scripting XSS attacks. This occurs due to a vulnerability in the nav.html...

PHPXref 0.7 - nav.html Cross-Site Scripting

PHPXref 0.7 - nav.html Cross-Site Scripting source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code ...