CVE-2017-9085

Published: 2017-11-14T17:29Z

Last Modified: 2024-11-21T03:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the (1) "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or (2) "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt