CVE-2022-1715 Account Takeover in neorazorx/facturascripts

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

CVE-2022-1715 Account Takeover in neorazorx/facturascripts

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...

Cross-site Scripting (XSS)

facturascripts/facturascripts is vulnerable to reflected cross-site scripting. The vulnerability exists in the privateCore function of EditPageOption.php' due to the lack of sanitization which allows an attacker to inject and execute malicious javascript...

Cross-site Scripting in facturascripts

Reflected cross-site scripting using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.08. This can lead to theft of a user's cookies, which in turn could lead to account takeover or do other malicious activities in a victim's browser...

GHSA-6465-R752-2H8V Cross-site Scripting in facturascripts

Reflected cross-site scripting using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.08. This can lead to theft of a user's cookies, which in turn could lead to account takeover or do other malicious activities in a victim's browser...

FacturaScripts 安全漏洞

FacturaScripts is an open source ERP software from Carlos Garcia, an individual developer in Spain. A security vulnerability exists in FacturaScripts versions prior to 2022.07 that stems from an account takeover issue...

PT-2022-14067 · Unknown · Neorazorx/Facturascripts

Name of the Vulnerable Software and Affected Versions: neorazorx/facturascripts versions prior to 2022.07 Description: The issue is related to an Account Takeover in the GitHub repository neorazorx/facturascripts. It is caused by improper type casting. Recommendations: For versions prior to...

CVE-2022-1682

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

CVE-2022-1682

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

CVE-2022-1682

The CVE-2022-1682 entry describes a reflected cross-site scripting (XSS) vulnerability in FacturaScripts (neorazorx/facturascripts) prior to version 2022.07. The root cause is reflected XSS via URL-based payloads, allowing an attacker to steal cookies and potentially take over user accounts or pe...

CVE-2022-1682 Reflected Xss using url based payload in neorazorx/facturascripts

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

CVE-2022-1682 Reflected Xss using url based payload in neorazorx/facturascripts

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an ERP software. FacturaScripts versions prior to 2022.07 contain a cross-site scripting vulnerability that could be exploited by attackers to steal a user's cookie, which could lead to account takeover or any malicious activity in the victim's browser...

FacturaScripts Cross-Site Scripting Vulnerability (CNVD-2022-76230)

FacturaScripts is an ERP software. cross-site scripting vulnerability exists in versions prior to FacturaScripts 2022.07, which can be exploited by attackers to execute arbitrary javascript code, steal user cookies, execute HTTP requests, obtain "same-origin " page content, etc...

Cross-site Scripting (XSS)

facturascripts is vulnerable to cross-site scripting. An attacker is able to inject malicious code via model fields, allowing stealing of user's cookie, performing HTTP request and getting content of same origin page, and so on...

GHSA-M8GV-GVHF-7RHP Cross-site Scripting in FacturaScripts

FacturaScripts versions 2022.06 and prior are vulnerable to reflected cross-site scripting attacks. This vulnerability can use arbitrarily executed javascript code to steal users' cookies, perform HTTP request, get content of same origin page, etc. A fix is available on the master branch of the...

Cross-site Scripting in FacturaScripts

FacturaScripts versions 2022.06 and prior are vulnerable to reflected cross-site scripting attacks. This vulnerability can use arbitrarily executed javascript code to steal users' cookies, perform HTTP request, get content of same origin page, etc. A fix is available on the master branch of the...

CVE-2022-1571

Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07. This vulnerability can be arbitrarily executed javascript code to steal user'cookie, perform HTTP request, get content of same origin page, etc...

CVE-2022-1571

Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07. This vulnerability can be arbitrarily executed javascript code to steal user'cookie, perform HTTP request, get content of same origin page, etc...

CVE-2022-1571

CVE-2022-1571 affects FacturaScripts (ERP) prior to 2022.07 via a reflected cross-site scripting flaw in the Create Subaccount flow of the neorazorx/facturascripts codebase. The vulnerability allows executing arbitrary JavaScript in a user’s browser, enabling cookie theft, outbound requests, and ...