PT-2014-4023

Name of the Vulnerable Software and Affected Versions rexx Recruitment versions R6.1 through R7 without fixes from 2014-01-15 Description The issue allows remote attackers to conduct cross-site scripting XSS attacks via the oninput event handler in the fname parameter to the default URI in "/reg"...