Kodak InSite Cross-Site Scripting Vulnerability

Kodak InSite is a WEB-based application. Multiple cross-site scripting vulnerabilities exist in Kodak InSite versions 6.5 through 8.0. A remote attacker can inject arbitrary web script by sending the 'paramFile' parameter to the /Site/Troubleshooting/DiagnosticReport.asp file or...