CVE-2018-18419: Improper Neutralization of Input During Web Page Generation

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filename to the /account URI...

PT-2018-14449

Name of the Vulnerable Software and Affected Versions ARDAWAN.COM User Management version 1.1 Description A stored XSS issue has been found in the upload section, which can be exploited by uploading a file, such as a .jpg, with a specially crafted filename to the "/account" URI. Recommendations F...