Security Advisory

CVE-2014-1224

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-10-06 23:00:00

Last updated 2024-08-06 09:34:41

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to conduct cross-site scripting (XSS) attacks via the oninput event handler in the fname parameter to the default URI in /reg.

← Browse all CVEs View on cve.org ↗