CVE-2005-3014

Cross-site scripting XSS vulnerability in Ensim webplliance allows remote attackers to inject arbitrary web script or HTML via the Login OCWloginusername field...

CVE-2005-3014

CVE-2005-3014 describes a cross-site scripting (XSS) vulnerability in Ensim WEBppliance where input in the ocw_login_username field is not sanitized before being used in dynamically generated pages. This allows remote attackers to inject arbitrary web script/HTML. The root cause is insufficient i...