CVE-2004-1197

CVE-2004-1197 is an XSS vulnerability in Insite InShop (inshop.pl) where the screen parameter can be abused to inject arbitrary script/HTML. Nessus details additionally note an input-validation error in inshop.pl (screen argument) and inmail.pl (acao argument) enabling cross-site scripting and po...

CVE-2004-1196

CVE-2004-1196 affects Insite Inmail’s inmail.pl script (parameter acao) and is described as a cross-site scripting (XSS) vulnerability allowing remote injection of script/HTML. Connected documents corroborate a vulnerability in InMail/InShop web apps written in Perl and specify the acao parameter...