Description
Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the call parameter.
References
- 56802 third-party-advisory
- 65353 vdb-entry
- http://www.i-doit.com/en/company/news/single-news/?tx_ttnews%5Btt_news%5D=136
- 56834 third-party-advisory
- 20140205 CVE-2014-1237 (XSS in i-doit Pro) mailing-list
- http://www.csnc.ch/misc/files/advisories/CVE-2014-1237_i-doit_Cross-site_Scripting_-_XSS.txt
- 102910 vdb-entry
- idoit-cve20141237-xss(90969) vdb-entry
- http://packetstormsecurity.com/files/125062