4 matches found
Reflected-XSS-on-Opentext-Portal-v7.4.4
Cross-site scripting XSS vulnerability in OpenText Portal v7.4.4 allows remote attackers to inject arbitrary web script or HTML code via the vgnextoid URI parameter. Attack vector: Javascript injection in vgnextoid parameter preceded of "--" html comment closing sequence RESULT: Found by Héctor...
CVE-2018-20165
Cross-site scripting XSS vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI...
CVE-2018-20165: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a menuitem URI...
PT-2019-10010
Name of the Vulnerable Software and Affected Versions: OpenText Portal version 7.4.4 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the vgnextoid parameter to a "menuitem URI". Recommendations: For OpenText Portal version 7.4.4,...