CVE-2016-5663

https://notcve.org/view.php?id=CVE-2016-5663

Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (1) code, (2) error, or (3) error_description parameter. Múltiples vulnerabilidades de XSS en oauth_callback.php en accesorios Accellion Kiteworks en versiones anteriores a kw2016.03.00 permiten a atacantes remotos inyectar secuencias de comandos web y HTML arbitrarios a través de (1) el código, (2) el error o (3) el parámetro error_description. • http://www.kb.cert.org/vuls/id/305607 http://www.securityfocus.com/bid/92662 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •