CVE-2014-2214: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in POSH aka Posh portal or Portaneo 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 error parameter to /includes/plugins/mobile/scripts/login.php or 2 id parameter to portal/openrssarticle.php...

PT-2019-7084

Name of the Vulnerable Software and Affected Versions POSH versions 3.0 through 3.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the error parameter to "/includes/plugins/mobile/scripts/login.php" or the id parameter to...