EUVD-2018-20511

Malware in sbrugna...

CVE-2018-8903

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

CVE-2018-8903

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

Cross site scripting

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

CVE-2018-8903

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

CVE-2018-8903

CVE-2018-8903 affects Open-AuditIT/Open‑Audit Professional 2.1. The vulnerability is a stored XSS via the Name or Description fields on the Credentials page, stemming from insufficient input sanitization. Public references in the connected documents confirm exploitation guidance (stored XSS PoC) ...

PT-2018-18704

Name of the Vulnerable Software and Affected Versions Open-AudIT Professional version 2.1 Description The issue allows for cross-site scripting XSS attacks via the Name or Description field on the Credentials screen. Recommendations For Open-AudIT Professional version 2.1, update to a version tha...

CVE-2018-8903: Improper Neutralization of Input During Web Page Generation

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...