364 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the National Rail Enquiries Live Departure Boards gadget before 1.1 allows remote National Rail Enquiries servers or man-in-the-middle attackers to inject arbitrary web script or HTML, and execute arbitrary code, via a response body, as demonstrated by a...
CVE-2008-2011
The CVE-2008-2011 entry concerns a Cross-site scripting (XSS) vulnerability in the National Rail Enquiries Live Departure Boards gadget prior to v1.1. The underlying issue is that a response body can be manipulated to inject arbitrary web script or HTML and even execute code via a SCRIPT element ...
CVE-2008-2011
Cross-site scripting XSS vulnerability in the National Rail Enquiries Live Departure Boards gadget before 1.1 allows remote National Rail Enquiries servers or man-in-the-middle attackers to inject arbitrary web script or HTML, and execute arbitrary code, via a response body, as demonstrated by a...
CVE-2008-2011: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the National Rail Enquiries Live Departure Boards gadget before 1.1 allows remote National Rail Enquiries servers or man-in-the-middle attackers to inject arbitrary web script or HTML, and execute arbitrary code, via a response body, as demonstrated by a...