8 matches found
CVE-2024-2259
This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerabl...
EUVD-2024-27215
Malicious code in bioql PyPI...
CVE-2024-2259
This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerabl...
CVE-2024-2259
CVE-2024-2259 affects InstaRISPACS Web UI: insufficient validation of the loginTo parameter in the user login module permits reflected XSS via crafted input. Impact involves potential confidentiality/integrity loss with HIGH subsequent impacts and UI interaction required; CVSS 4.0 base shows 6.4 ...
CVE-2024-2259 Reflected XXS Vulnerability in InstaRISPACS Software
This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerabl...
CVE-2024-2259 Reflected XXS Vulnerability in InstaRISPACS Software
This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerabl...
PT-2024-19494 · Unknown · Instarispacs
Name of the Vulnerable Software and Affected Versions: InstaRISPACS affected versions not specified Description: The issue exists due to insufficient validation of user-supplied input for the loginTo parameter in the user login module of the web interface. A remote attacker could exploit this by...
CVE-2024-2259: Improper Neutralization of Input During Web Page Generation
This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerabl...