EUVD-2021-17106

Malware in sbrugna...

CVE-2021-30170

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

Cross site scripting

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

CVE-2021-30171 Jun-He Technology Ltd. ERP POS - Stored XSS-2

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

PT-2021-18646

Name of the Vulnerable Software and Affected Versions ERP POS affected versions not specified Description The issue allows remote authenticated attackers to inject malicious JavaScript due to unfiltered special characters in users' input on the news page, leading to stored XSS attacks. This enabl...

PT-2021-18645

Name of the Vulnerable Software and Affected Versions ERP POS affected versions not specified Description The issue concerns a stored Cross-site scripting XSS attack. It occurs because special characters in the ERP POS customer profile page are not filtered from users' input. This allows remote...

CVE-2021-30171: Improper Neutralization of Input During Web Page Generation

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...

CVE-2021-30170: Improper Neutralization of Input During Web Page Generation

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks, additionally access and manipulate customer’s information...