4 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...
CVE-2018-16607
Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...
CVE-2018-16607: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...
PT-2018-13646
Name of the Vulnerable Software and Affected Versions Open-AudIT Professional edition version 2.2.7 Description A cross-site scripting XSS issue exists in the Orgs Page, allowing remote attackers to inject arbitrary web script via the Orgs name field. This enables attackers to execute malicious...