CVE-2015-2082
Beschrijving NL
Cross-site scripting (XSS) -kwetsbaarheid in Login.aspx in UNIT4 Prosoft HRMS vóór 8.14.330.43 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de txtUserID-parameter.
Origineel (Engels) tonen
Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43 allows remote attackers to inject arbitrary web script or HTML via the txtUserID parameter.