CVE-2014-8304

Cross-site scripting XSS vulnerability in In-Portal CMS 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the nexttemplate parameter to admin/index.php...

CVE-2014-8304: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in In-Portal CMS 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the nexttemplate parameter to admin/index.php...

CVE-2006-3278: Undefined Security Weakness

Cross-site scripting XSS vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nexttemplate, 2 start, 3 currmenuid, and 4 arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html...