2329 matches found
CVE-2017-14716
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...
Cross site scripting
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...
CVE-2017-14715
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...
CVE-2017-14716
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...
CVE-2017-14717
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter...
CVE-2017-14712
Affected product: EPESI 1.8.2 rev20170830. Vulnerability: Stored XSS in the Tasks Phonecall Notes Title parameter. Root cause (per sources): unescaped input in that field allows script injection, enabling arbitrary script execution in the context of the user. Impact: described as cross-site scrip...
CVE-2017-14715
CVE-2017-14715 affects EPESI 1.8.2 rev20170830 with a Stored XSS in the Tasks Alerts Title parameter. The CNVD entry confirms a cross-site scripting vulnerability exists and that an attacker can inject arbitrary web script or HTML. No additional technical details (e.g., exploit steps, affected ve...
CVE-2017-14716
CVE-2017-14716 affects EPESI 1.8.2 rev20170830, where a Stored XSS exists in the Tasks Title parameter. The consolidated documents confirm the flaw is a stored cross-site scripting vulnerability in the Tasks Title field, with CVSS metrics indicating low severity for the base score (3.5) and a sin...
CVE-2017-14717
This CVE concerns EPESI 1.8.2 rev20170830 with a Stored XSS vulnerability in the Tasks Description field. The issue originates from user-controllable content stored in a task description, enabling script execution when viewed. Public references (e.g., Exploit-DB, 0day, and OpenVAS entries) corrob...
CVE-2017-14717
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter...
CVE-2017-14715
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...
CVE-2017-14716
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...
CVE-2017-14712
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...
PT-2017-13646
Name of the Vulnerable Software and Affected Versions EPESI version 1.8.2 rev20170830 Description The issue concerns Stored XSS in the Tasks Description parameter. Recommendations For EPESI version 1.8.2 rev20170830, avoid using the Tasks Description parameter until the issue is resolved. Conside...
PT-2017-13645
Name of the Vulnerable Software and Affected Versions EPESI version 1.8.2 rev20170830 Description The issue concerns Stored XSS in the Tasks Title parameter. Recommendations For EPESI version 1.8.2 rev20170830, avoid using the Tasks Title parameter until the issue is resolved. Consider restrictin...
PT-2017-13641
Name of the Vulnerable Software and Affected Versions EPESI version 1.8.2 rev20170830 Description The issue concerns Stored XSS in the Tasks Phonecall Notes Title parameter. Recommendations For EPESI version 1.8.2 rev20170830, avoid using the Tasks Phonecall Notes Title parameter until the issue ...
PT-2017-13644
Name of the Vulnerable Software and Affected Versions EPESI version 1.8.2 rev20170830 Description The issue concerns Stored XSS in the Tasks Alerts Title parameter. Recommendations For EPESI version 1.8.2 rev20170830, avoid using the Tasks Alerts Title parameter until the issue is resolved. At th...
Cobian Backup 11 client operating system command injection vulnerability
Cobian Backup 11 client is a client for file backup applications developed by Swedish software developer Luis Cobian. The program supports several compression and strong decryption methods and allows you to backup files from their original directory to another directory on the same computer or on...
