|
Description
|
|
Multiple vulnerabilities were identified in AlstraSoft EPay Enterprise, which may be exploited by attackers to inject malicious HTML code. These flaws are due to input validation errors in the "profile.htm", "card.htm", "bank.htm", "subscriptions.htm", "send.htm", "request.htm", "forgot.htm", "escrow.htm", "donations.htm" and "products.htm" scripts that do not properly validate certain parameters, which may be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
|
