PT-2014-6439

Name of the Vulnerable Software and Affected Versions Schrack Technik microControl version 1.7.0 937 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...

CVE-2014-5382: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 937 allow remote attackers to inject arbitrary web script or HTML via the position textbox in the configuration menu or other unspecified vectors...