EUVD-2014-1035

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in Sitecore CMS before 7.0 Update-4 rev. 140120 allows remote attackers to inject arbitrary web script or HTML via the xmlcontrol parameter to the default URI. NOTE: some of these details are obtained from third party information...

CVE-2014-100004

Sitecore CMS up to version 7.0 Update-4 (rev. 140120) is affected by an XSS in the handling of XML Controls exposed via the default URI’s xmlcontrol parameter. The vulnerability allows remote attackers to inject arbitrary web scripts or HTML, with the NVD description noting basic impact of cross-...

PT-2015-3610

Name of the Vulnerable Software and Affected Versions Sitecore CMS versions prior to 7.0 Update-4 rev. 140120 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved by exploiting the xmlcontrol parameter in the default URI...

CVE-2014-100004: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Sitecore CMS before 7.0 Update-4 rev. 140120 allows remote attackers to inject arbitrary web script or HTML via the xmlcontrol parameter to the default URI. NOTE: some of these details are obtained from third party information...