CVE-2020-27741

CVE-2020-27741 concerns multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit up to version 926, which allow remote attackers to inject arbitrary web script or HTML via various pages and parameters. The provided documents state the existence of these XSS flaws but do not detail af...

CVE-2020-27740

CVE-2020-27740 affects Citadel WebCit up to version 926. The vulnerability lets unauthenticated remote attackers enumerate valid users on the platform, as described in the CVE entry. Public details in the initial document indicate reporting to the vendor in a public thread; no explicit exploit co...

CVE-2020-27740

Removed by vendor...

Citadel WebCit 7.02/7.10 showuser who Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/24913/info Citadel WebCit is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied input dat...

Citadel WebCit 7.02/7.10 - 'showuser?who' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24913/info Citadel WebCit is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may all...

Citadel WebCit 7.027.10 - showuser?who Cross-Site Scripting

Citadel WebCit 7.027.10 - showuser?who Cross-Site Scripting source: https://www.securityfocus.com/bid/24913/info Citadel WebCit is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and a cross-site scripting issue, because it fails to sufficiently saniti...