cve/2014/CVE-2014-9212.md

18 lines
775 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2014-9212](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9212)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Multiple cross-site scripting (XSS) vulnerabilities in Altitude uAgent in Altitude uCI (Unified Customer Interaction) 7.5 allow remote attackers to inject arbitrary web script or HTML via (1) an email hyperlink or the (2) style parameter in the image attribute section.
### POC
#### Reference
- http://packetstormsecurity.com/files/129372/Altitude-uAgent-Altitude-uCI-7.5-XSS.html
#### Github
No PoCs found on GitHub currently.