CVE-2008-1213

CVE-2008-1213 describes a cross-site scripting (XSS) vulnerability in Numara FootPrints for Linux 8.1. An attacker can inject arbitrary web script or HTML via the Title field when setting an appointment. Root cause: input in the Title form is not properly sanitized. Impact is indicated as I:P (pa...

CVE-2008-1214

CVE-2008-1214 affects Numara FootPrints 8.1 on Linux, where MRcgi/MRProcessIncomingForms.pl is vulnerable to remote code execution via shell metacharacters in the PROJECTNUM parameter. The description notes that provenance is unknown and details are from third party information; no exploit specif...