CVE-2018-7996

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...

CVE-2018-7996

CVE-2018-7996 affects Eramba e1.0.6.033. The vulnerability is a Stored XSS in the tooltip box reachable via the /programScopes description parameter. The issue arises from improper handling of user-supplied input, enabling injection of malicious scripts. Impact is limited to client-side data inte...

CVE-2018-7997

Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript...

CVE-2018-7997

Eramba e1.0.6.033 is affected by a Reflected XSS vulnerability on the Error page of the CSV file inclusion tab at /importTool/preview, triggered by a maliciously crafted CSV file. The issue stems from improper input handling in the CSV import preview flow, allowing injected JavaScript to be refle...

CVE-2018-7996

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...

Cross site scripting

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

CVE-2018-7894 affects Eramba e1.0.6.033, with a Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter. The issue is documented across multiple sources (NVD entry for CVE-2018-7894 and related Red Hat/CNVD records) and is described as: an XSS vulnerability cau...

CVE-2018-7894

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

Eramba Date Filter Cross-Site Scripting Vulnerability

Eramba is an open source enterprise level IT governance application from Eramba UK. The program features IT security, compliance auditing and analysis, etc. Date Filter is one of the data filters. A cross-site scripting vulnerability exists in Date Filter in Eramba. A remote attacker can exploit...

CVE-2018-7741

Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI...

CVE-2018-7741

Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI...

Cross site scripting

Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI...

CVE-2018-7741

Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI...

CVE-2018-7741

CVE-2018-7741 affects Eramba e1.0.6.033 and is a Reflected XSS vulnerability in the Date Filter caused by the created parameter to the /crons URI. The connected records corroborate the issue across multiple sources (NVD, Red Hat, CNVD, CVE lists). The available documents specify the vulnerability...

eramba Enterprise/Community Cross-Site Scripting Vulnerability

eramba is a leading, open source application for enterprise-class IT governance, risk and compliance. A cross-site scripting vulnerability exists in the Enterprise and Community editions of Eramba, which can be exploited by an attacker to steal cookie-based authentication or inject malicious...

eramba Enterprise / Community Cross Site Scripting

Exploit Title: eramba Enterprise & Community Editions Stored XSS Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH - https://www.crypttech.com Website: www.yunus.ninja Contact: [email protected] 1. ADVISORY INFORMATION ======================= Product: eramba Open-Source IT GRC...