CVE-2015-7360: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...

PT-2016-3748

Name of the Vulnerable Software and Affected Versions FortiSandbox versions prior to 2.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI of FortiSandbox. These vulnerabilities allow remote attackers to inject arbitrary web script or...