CVE-2014-9434
Beschrijving NL
Cross-site scripting (XSS) -kwetsbaarheid in admin/managerrelated.php in de administratieve backend in Absolut Engine 1.73 stelt externe geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via de titelparameter.
Origineel (Engels) tonen
Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via the title parameter.