EUVD-2015-4718

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

CVE-2015-4699

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

CVE-2015-4699

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

PT-2017-6793

Name of the Vulnerable Software and Affected Versions Cloud4Wi versions prior to 5.9.7 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI. This enables attackers to execute...

CVE-2015-4699: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...