8 matches found
CVE-2024-41640
Description AML Surety Eco up to version 3.5 is affected by an un-authenticated reflected cross-site scripting. The target web application handles error in a dedicated error page accessible without any authentication containing a URL parameter that is not sanitizing user input. The provided...
CVE-2024-41640
Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...
CVE-2024-41640
Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...
CVE-2024-41640: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...
PT-2024-29475 · Unknown · Aml Surety Eco
Name of the Vulnerable Software and Affected Versions: AML Surety Eco versions up to 3.5 Description: The issue allows an attacker to run arbitrary code via a crafted GET request using the id parameter. This is a Cross Site Scripting XSS issue. Recommendations: For AML Surety Eco versions up to...
CVE-2024-41640
The AML Surety Eco software (versions up to 3.5 ) is vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to sanitize user input in the id parameter within a dedicated error page (accessible via https:///Surety3Eco/AppError.aspx). An a...
