CVE-2015-1179

MEDIUM · 4.3 CVSS Gepubliceerd: 26-01-2015 CWE-79

Beschrijving

Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dpid, (2) dpxid, or (3) pid parameter.

Vendors

Infinite Automation Systems

Affected products

Mango Automation

References

packetstormsecurity.com
www.securityfocus.com