EUVD-2020-19129

Malware in sbrugna...

CVE-2020-26584

An issue was discovered in Sage DPW 202006x before 202006002. The search field "Kurs suchen" on the page Kurskatalog is vulnerable to Reflected XSS. If the attacker can lure a user into clicking a crafted link, he can execute arbitrary JavaScript code in the user's browser. The vulnerability can ...

Design/Logic Flaw

An issue was discovered in Sage DPW 202006x before 202006002. The search field "Kurs suchen" on the page Kurskatalog is vulnerable to Reflected XSS. If the attacker can lure a user into clicking a crafted link, he can execute arbitrary JavaScript code in the user's browser. The vulnerability can ...

PT-2020-16468

Name of the Vulnerable Software and Affected Versions Sage DPW versions prior to 2020 06 002 Description An issue was discovered that allows for Reflected XSS in the search field "Kurs suchen" on the Kurskatalog page. This can be exploited if an attacker lures a user into clicking a crafted link,...

CVE-2020-26584: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Sage DPW 202006x before 202006002. The search field "Kurs suchen" on the page Kurskatalog is vulnerable to Reflected XSS. If the attacker can lure a user into clicking a crafted link, he can execute arbitrary JavaScript code in the user's browser. The vulnerability can ...