678 matches found
CVE-2019-20516
ERPNext 11.1.47 is affected by a reflected XSS vulnerability via PATH_INFO to the blog/ URI. The connected records confirm the vulnerable condition but do not provide exploitation details, broader affected versions, or a vendor patch/remediation in the supplied documents.
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
CVE-2019-20515
ERPNext 11.1.47 is affected by a reflected XSS via the PATH_INFO to the addresses/ URI. The vulnerability is documented across multiple connected sources (e.g., NVD, Red Hat advisory, CNVD, OSV, CVE lists) with consistent description. Root cause details beyond “reflected XSS via PATH_INFO” are no...
CVE-2019-20515
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20514
CVE-2019-20514 affects ERPNext 11.1.47 with a reflected XSS vulnerability via PATH_INFO to the /address/ URI. The root cause is inadequate validation of PATH_INFO, enabling injection of client-side script. Reported impact ranges across sources (CVSS data vary: up to high severity in some vectors)...
CVE-2019-20520: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...
CVE-2019-20514: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the address/ URI...
CVE-2019-20519: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the user/ URI, as demonstrated by a crafted e-mail address...
ERPNext Injection Vulnerability
ERPNext is an open source enterprise resource planning solution from ERPNext India. An injection vulnerability exists in ERPNext version 11.1.47, which arises from a lack of proper validation of user input data by a networked system or product during the course of a user's operation to enter...
CVE-2019-20515: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20521: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...
CVE-2019-20517: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the contact/ URI...
CVE-2019-20516: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
CVE-2019-20518: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the project/ URI...
CVE-2019-20511
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
CVE-2019-20511
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
Design/Logic Flaw
ERPNext 11.1.47 allows blog?blogcategory= Frame Injection...
CVE-2019-20511
CVE-2019-20511 affects ERPNext 11.1.47 and is described as a Frame Injection vulnerability via the blog?blog_category parameter. Red Hat/CNVD-style entries corroborate an injection issue stemming from insufficient input validation on user-supplied data; ERPNext’s styling of a blog category parame...