CVE-2014-2710

CVE-2014-2710 affects Oliver (formerly Webshare) up to version 1.3.1. The vulnerability is non-persistent XSS via PATH_INFO on the login endpoints (index.php and loginform-inc.php). Root cause: input handling/validation flaw on login pages leading to script/HTML injection. Impact per sources incl...