PT-2021-10405

Name of the Vulnerable Software and Affected Versions: Automated Logic Corporation ALC WebCTRL System versions 6.5 and prior Description: The issue allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request. Recommendations: For versions 6.5...

CVE-2020-19762: Improper Neutralization of Input During Web Page Generation

Automated Logic Corporation ALC WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request...