CVE-2017-9085

Kodak InSite (versions 6.5–8.0) is affected by cross-site scripting (XSS) via the parameterFile parameter to two pages: /Site/Troubleshooting/DiagnosticReport.asp and /Site/Troubleshooting/SpeedTest.asp. The vulnerability allows remote attackers to inject arbitrary web scripts. The sources in the...

CVE-2011-1427

Kodak InSite 5.5.2 is affected by multiple cross-site scripting (XSS) vulnerabilities. The CVE entry notes three input vectors: (1) Language parameter to Pages/login.aspx, (2) HeaderWarning parameter to Troubleshooting/DiagnosticReport.asp, and (3) User-Agent header to troubleshooting/speedtest.a...