PT-2024-27706

Name of the Vulnerable Software and Affected Versions Tessi Docubase Document Management product versions 5.x Description The issue allows a remote attacker to execute arbitrary code via the page parameter, which is used in a Cross Site Scripting attack. This enables the attacker to inject...

PT-2024-27707 · Tessi · Tessi Docubase Document Management

Name of the Vulnerable Software and Affected Versions: Tessi Docubase Document Management product versions 5.x Description: The issue allows a remote attacker to execute arbitrary code via the idactivity parameter, which is related to a Cross Site Scripting vulnerability. Recommendations: For Tes...

PT-2024-27709

Name of the Vulnerable Software and Affected Versions Tessi Docubase Document Management product versions 5.x Description The issue allows a remote attacker to execute arbitrary code via the parameter sectionContent related to the functionality of adding notes to an uploaded file. This is a Cross...

CVE-2024-37673: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the filename parameter...

CVE-2024-37671: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the page parameter...

CVE-2024-37675: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Tessi Docubase Document Management product 5.x allows a remote attacker to execute arbitrary code via the parameter "sectionContent" related to the functionality of adding notes to an uploaded file...