CVE-2022-48326

Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 nome, 2 aCliente, 3 eCliente, 4 dCliente, 5 vCliente, 6 aProduto, 7 eProduto, 8 dProduto, 9 vProduto, 10 aServico, 11 eServico, 12 dServico, 13 vServico...

CVE-2022-48325: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 year, 2 oldSenha, 3 novaSenha, 4 termo, 5 nome, 6 cnpj, 7 ie, 8 cep, 9 logradouro, 10 numero, 11 bairro, 12 cidade, 13 uf, 14 telefone, 15 email, 16 id,...

CVE-2022-48325

Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 year, 2 oldSenha, 3 novaSenha, 4 termo, 5 nome, 6 cnpj, 7 ie, 8 cep, 9 logradouro, 10 numero, 11 bairro, 12 cidade, 13 uf, 14 telefone, 15 email, 16 id,...

CVE-2022-48326: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 nome, 2 aCliente, 3 eCliente, 4 dCliente, 5 vCliente, 6 aProduto, 7 eProduto, 8 dProduto, 9 vProduto, 10 aServico, 11 eServico, 12 dServico, 13 vServico...

CVE-2022-48325

Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 year, 2 oldSenha, 3 novaSenha, 4 termo, 5 nome, 6 cnpj, 7 ie, 8 cep, 9 logradouro, 10 numero, 11 bairro, 12 cidade, 13 uf, 14 telefone, 15 email, 16 id,...

PT-2023-15705

Name of the Vulnerable Software and Affected Versions Mapos version 4.39.0 Description Multiple Cross Site Scripting XSS vulnerabilities in Mapos allow attackers to execute arbitrary code. The affected parameters include: dataInicial, dataFinal, tipocliente, format, precoInicial, precoFinal,...

PT-2023-15702

Name of the Vulnerable Software and Affected Versions Mapos version 4.39.0 Description Multiple Cross Site Scripting XSS vulnerabilities in Mapos allow attackers to execute arbitrary code. The affected parameters include: pesquisa, data, data2, nome, descricao, idDocumentos, id, senha, nomeClient...

PT-2023-15704

Name of the Vulnerable Software and Affected Versions Mapos version 4.39.0 Description Multiple Cross Site Scripting XSS vulnerabilities in Mapos allow attackers to execute arbitrary code. The issue affects various parameters, including nome, aCliente, eCliente, dCliente, vCliente, aProduto,...

Mapos 跨站脚本漏洞

Mapos is a service order control system by Ramon Silva Personal Developer. A security vulnerability exists in Mapos version 4.39.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that can be exploited by an attacker to execute arbitrary code...

CVE-2022-48327: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 dataInicial, 2 dataFinal, 3 tipocliente, 4 format, 5 precoInicial, 6 precoFinal, 7 estoqueInicial, 8 estoqueFinal, 9 deid, 10 ateid, 11 clientesid, 12...

CVE-2022-48324

CVE-2022-48324 affects Mapos version 4.39.0 and encompasses multiple XSS vulnerabilities affecting numerous input fields across modules (Arquivos.php, Clientes.php, Cobrancas.php, Financeiro.php, Garantias.php, Login.php). The root cause is improper handling/sanitization of user-supplied input, e...

CVE-2022-48326

Mapos 4.39.0 contains multiple Cross Site Scripting (XSS) vulnerabilities that can allow an attacker to execute arbitrary code. The CVE-2022-48326 entry is supported by connected sources detailing the affected product (Mapos 4.39.0), the root cause (XSS in numerous input parameters), and the scop...

Cross site scripting

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16919

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16919

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16919

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16919

CVE-2017-16919 affects MapOS 3.1.11 and earlier. A stored XSS vulnerability exists in the /clientes/visualizar endpoint, exploitable via a crafted description parameter, allowing remote attackers to inject arbitrary web script or HTML. The connected documents confirm the vulnerability class and a...

CVE-2017-16919

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

MapOS Stored Cross-Site Scripting Vulnerability

MapOS is a free service order control system based on PHP and MySQL. A cross-site scripting vulnerability exists in /clientes/visualizar in MapOS 3.1.11 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of specially crafted...

CVE-2017-16919: Improper Neutralization of Input During Web Page Generation

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...