CVE-2015-2207

Multiple cross-site scripting (XSS) vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) ctrl, (2) t90001_0_theform_selection, (3) _scroll, (4) tableName, (5) parent, (6) circuit, (7) return, (8) xname, or (9) mpTransactionId parameter.

• CWE-79

• http://packetstormsecurity.com/files/132807/NetCracker-Resource-Management-System-8.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/archive/1/536053/100/0/threadedThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/132807/NetCracker-Resource-Management-System-8.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/archive/1/536053/100/0/threadedThird Party Advisory, VDB Entry

Published

Feb 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2199Multiple SQL injection vulnerabilities in the WonderPlugin A…
• CVE-2015-2201Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows Vi…7.2
• CVE-2015-2202Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows ad…7.2
• CVE-2015-2203Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticate…
• CVE-2015-2204Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before…
• CVE-2015-2206libraries/select_lang.lib.php in phpMyAdmin 4.0.x before 4.0…
• CVE-2015-2208The saveObject function in moadmin.php in phpMoAdmin 1.1.2 a…
• CVE-2015-2209DLGuard 4.5 allows remote attackers to obtain the installati…
• CVE-2015-2210The help window in Epicor CRS Retail Store before 3.2.03.01.…
• CVE-2015-2212Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-2213SQL injection vulnerability in the wp_untrash_post_comments …
• CVE-2015-2214NetCat 5.01 and earlier allows remote attackers to obtain th…