Unrated severityNVD Advisory· Published Feb 25, 2015· Updated Jun 17, 2026

CVE-2015-2082

Description

Cross-site scripting (XSS) vulnerability in Login.aspx in UNIT4 Prosoft HRMS before 8.14.330.43 allows remote attackers to inject arbitrary web script or HTML via the txtUserID parameter.

Affected products

Unit4/Prosoft Hrms
cpe:2.3:a:unit4:prosoft_hrms:*:*:*:*:*:*:*:*
Range: <=8.14.230.47
Unit4/HRMSllm-create
Range: < 8.14.330.43

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/130396/UNIT4-Prosoft-HRMS-8.14.230.47-Cross-Site-Scripting.htmlnvdExploit
www.securityfocus.com/archive/1/534705/100/0/threadednvd
www.securityfocus.com/bid/74896nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000