CVE-2008-10001

The CVE-2008-10001 entry concerns Pro2col Stingray FTS. Affected component: Stingray FTS software; vulnerability: cross-site scripting caused by manipulation of the Username argument. Impact: potential remote initiation of the attack; relevance limited to products no longer supported by the maint...

CVE-2008-4168

The CVE-2008-4168 entry describes a Cross-site scripting (XSS) vulnerability in Pro2col Stingray FTS, specifically in verify_login.jsp, exploitable via the form_username field (the user name). The underlying cause is an input handling flaw that allows injection of arbitrary web script or HTML. Af...