CVE-2006-1436
Published Apr 15, 2006Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description,…
Vendor/product archive
2 CVEs tagged to upoint / at1_event_publisher — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description,…
UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a d…