CVE-2015-2043 - Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the (1) bt, (2) variable, or (3) et parameter to myspeed/db/historyitem

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the (1) bt, (2) variable, or (3) et parameter to myspeed/db/historyitem

Published Feb 25, 2015

4.3

MEDIUM

CVSS 2.0

EPSS 1.01%

Description

Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the (1) bt, (2) variable, or (3) et parameter to myspeed/db/historyitem.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://packetstormsecurity.com/files/130490/MyConnection-Server-8.2b-Cross-Site-Scripting.html
x_refsource_MISCExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-2156
Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/130490/MyConnection-Server-8.2b-Cross-Site-Scripting.html		x_refsource_MISCExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-2156		Advisory