7 matches found
CVE-2011-4958
Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...
Cross site scripting
Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...
CVE-2011-4958
Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...
CVE-2011-4958
Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...
CVE-2011-4958
CVE-2011-4958 describes a cross-site scripting (XSS) vulnerability in the SSViewer.php process function of SilverStripe. The flaw allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders in affected releases: SilverStripe < 2.3.13 and SilverS...
CVE-2011-4958: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...
PT-2014-2183
Name of the Vulnerable Software and Affected Versions SilverStripe versions prior to 2.3.13 SilverStripe versions 2.4.x prior to 2.4.6 Description A cross-site scripting XSS issue exists due to insufficient input validation in the process function within SSViewer.php. This allows remote attackers...