CVE-2015-6529 – phpipam 1.1.010 Cross Site Scripting

https://notcve.org/view.php?id=CVE-2015-6529

12 Aug 2015 — Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to site/error.php or (2) ip parameter to site/tools/searchResults.php. Múltiples vulnerabilidades de XSS en phpipam 1.1.010, permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de (1) el parámetro section de site/error.php o (2) el parámetro ip de site/tools/searchResults.php. phpipam version 1.1.010 suffers... • https://packetstorm.news/files/id/133055 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •