FITSTATS Technologies AthleteMonitoring Cross-site Attack

The vulnerability of the FITSTATS Technologies AthleteMonitoring system for monitoring and analyzing physical activity and health status is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site...

CVE-2025-1842

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842 FITSTATS Technologies AthleteMonitoring login.php cross site scripting

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842 FITSTATS Technologies AthleteMonitoring login.php cross site scripting

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-1842

CVE-2025-1842 affects FITSTATS Technologies AthleteMonitoring (up to version 20250302). The vulnerability is a cross-site scripting flaw in the /login.php login flow caused by manipulation of the username parameter in user input. It is exploitable remotely, and publicly disclosed exploits exist. ...

CVE-2025-1842: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

PT-2025-9236

Name of the Vulnerable Software and Affected Versions AthleteMonitoring up to 20250302 Description A problematic vulnerability was found in AthleteMonitoring, affecting the /login.php file. The issue is related to the manipulation of the username argument, which leads to cross-site scripting. Thi...