Francis Lachapelle

3 exploits Active since Feb 2017
CVE-2014-9905 WRITEUP MEDIUM WRITEUP
SOGo < 2.1.1 - Cross-Site Scripting via Appointment Title or Contact Fields
Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title of an appointment or (2) contact fields.
CVSS 6.1
CVE-2014-9905 WRITEUP MEDIUM WRITEUP
SOGo < 2.1.1 - Cross-Site Scripting via Appointment Title or Contact Fields
Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title of an appointment or (2) contact fields.
CVSS 6.1
CVE-2014-9905 WRITEUP MEDIUM WRITEUP
SOGo < 2.1.1 - Cross-Site Scripting via Appointment Title or Contact Fields
Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title of an appointment or (2) contact fields.
CVSS 6.1