57 matches found
CVE-2022-2066 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2066
CVE-2022-2066 corresponds to a Cross-site Scripting (XSS) vulnerability that is reflected in the FacturaScripts project (neorazorx/facturascripts) prior to 2022.06. The vulnerability affects the client side, allowing an attacker to inject JavaScript into rendered pages. Multiple records (NVD, Red...
CVE-2022-2065
FacturaScripts (ERP) has a stored XSS in versions prior to 2022.06 caused by lack of filename validation, allowing an attacker to upload an SVG file that leads to script execution. The CVE is associated with CVE-2022-2065 across multiple advisories (NVD, RH, CNVD, OSV, etc.). The exposed componen...
CVE-2022-2065 Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2065 Cross-site Scripting (XSS) - Stored in neorazorx/facturascripts
Cross-site Scripting XSS - Stored in GitHub repository neorazorx/facturascripts prior to 2022.06...
CVE-2022-2016
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1...
CVE-2022-2016
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1...
CVE-2022-2016 Cross-site Scripting (XSS) - Reflected in neorazorx/facturascripts
Cross-site Scripting XSS - Reflected in GitHub repository neorazorx/facturascripts prior to 2022.1...
CVE-2022-2016
CVE-2022-2016 involves a reflected Cross-site Scripting (XSS) vulnerability in FacturaScripts (neorazorx/facturascripts) before version 2022.1. Public sources describe a reflected XSS via user-controlled input, with some references citing a potential vector in the Balance.php file (codbalance par...
Cross-site scripting - Reflected XSS caused by error logs in neorazorx/facturascripts
Description There are two fields that can insert the XSS payload by the error log. 1. http://127.0.0.1/facturascripts/EditBalance, the codbalance field 2. http://127.0.0.1/facturascripts/EditSettings, the tipoidfiscal field in Fiscal Id Both fields require 1 and 25 numbers or letters, no spaces,...
CVE-2022-1988
Cross-site Scripting XSS - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09...
CVE-2022-1988
Cross-site Scripting XSS - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09...
CVE-2022-1988
Summary: CVE-2022-1988 is a Cross-site Scripting (XSS) vulnerability in the open‑source ERP project FacturaScripts (GitHub: neorazorx/facturascripts), affecting versions prior to 2022.09. Root cause: lack of sanitization in input handling for the descripcion parameter in Cuenta.php, enabling inje...
CVE-2022-1988 Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts
Cross-site Scripting XSS - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09...
CVE-2022-1988 Cross-site Scripting (XSS) - Generic in neorazorx/facturascripts
Cross-site Scripting XSS - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09...
Refelect XSS in neorazorx/facturascripts
Description /facturascripts/EditCuenta can input the taint data without sanitization by the parameter description Proof of Concept POST /facturascripts/EditCuenta HTTP/1.1 Host: 127.0.0.1 Content-Length: 1115 Cache-Control: max-age=0 sec-ch-ua: "NotA:Brand";v="8", "Chromium";v="101"...
Account takeover in facturascripts
Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.08 due to improper type casting...
CVE-2022-1715
Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07...