Cross site scripting

Cross-site scripting XSS vulnerability in wflogin.jsp in Aris Global ARISg 5.0 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...

CVE-2010-2130

CVE-2010-2130 describes a Cross-site scripting (XSS) vulnerability in the ARISg 5.0 product, specifically in the wflogin.jsp page, exploitable via the errmsg parameter to inject arbitrary script/HTML. The connected documents confirm the vulnerable component (wflogin.jsp) and parameter but do not ...