2 matches found
CVE-2004-1935
CVE-2004-1935 describes a cross-site scripting (XSS) vulnerability in SCT Campus Pipeline where remote attackers can inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an email attachment. The NVD metrics indicate the impact is limited to partial integrity...
CVE-2004-1593
SCT Campus Pipeline is affected by a cross-site scripting (XSS) flaw in render.UserLayoutRootNode.uP; the vulnerability is exploitable by supplying arbitrary script/HTML via the utf parameter. The CVSSv2 base score is 4.3 (MEDIUM) with network attack vector and no authentication required, affecti...