WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting Detection

WSO2 Data Analytics Server 3.1.0 is susceptible to cross-site scripting in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter. !/usr/bin/env python3 -- coding: utf-8 -- """WSO2 Data Analytics Server 3.""" from kittysploit import from...

CVE-2022-4521: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in WSO2 carbon-registry up to 4.8.6. This affects an unknown part of the component Request Parameter Handler. The manipulation of the argument parentPath/path/username/path/profilemenu leads to cross site scripting. It is possible to initia...

PT-2017-13612

Name of the Vulnerable Software and Affected Versions WSO2 Data Analytics Server version 3.1.0 Description The issue concerns a security problem where an attacker can inject malicious scripts. This is possible through the collectionName or parentPath parameter in the "carbon/resources/add...

CVE-2017-14651: Improper Neutralization of Input During Web Page Generation

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter...