CVE-2019-20515

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...

EUVD-2019-11062

Malware in sbrugna...

EUVD-2019-11064

Malware in sbrugna...

ERPNext Cross-Site Scripting Vulnerability

ERPNext is an open source enterprise resource planning solution from ERPNext India. A cross-site scripting vulnerability exists in ERPNext version 11.1.47. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerabilit...

ERPNext cross-site scripting vulnerability (CNVD-2020-19002)

ERPNext is an open source enterprise resource planning solution from ERPNext India. A cross-site scripting vulnerability exists in ERPNext version 11.1.47. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerabilit...

ERPNext cross-site scripting vulnerability (CNVD-2020-19003)

ERPNext is an open source enterprise resource planning solution from ERPNext India. A cross-site scripting vulnerability exists in ERPNext version 11.1.47. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerabilit...

ERPNext Cross-Site Scripting Vulnerability (CNVD-2020-25805)

ERPNext is a free, open source, integrated enterprise resource planning software. A cross-site scripting vulnerability exists in ERPNext version 11.1.47. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability ...

CVE-2019-20518

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the project/ URI...

CVE-2019-20515

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...

CVE-2019-20520

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...

CVE-2019-20521

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...

CVE-2019-20516

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...

CVE-2019-20518

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the project/ URI...

CVE-2019-20514

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the address/ URI...

Cross site scripting

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the contact/ URI...

Design/Logic Flaw

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the user/ URI, as demonstrated by a crafted e-mail address...

Cross site scripting

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...

Cross site scripting

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...

Design/Logic Flaw

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the project/ URI...

Cross site scripting

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the address/ URI...