EUVD-2020-28096

Malware in sbrugna...

CVE-2020-6956

PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...

PCS DEXICON Cross-Site Scripting Vulnerability

PCS DEXICON is a solution for time recording and access control. A cross-site scripting vulnerability exists in the 'loginName' parameter in the loginaction.jsp file in PCS DEXICON version 3.4.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. ...

CVE-2020-6956

PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...

Cross site scripting

PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...

CVE-2020-6956

PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...

CVE-2020-6956

PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...

CVE-2020-6956

CVE-2020-6956 concerns PCS DEXICON 3.4.1, where a Cross-Site Scripting (XSS) vulnerability exists in the loginName parameter of login_action.jsp. The root cause, per CNVD, is inadequate validation of client-side data by the WEB application, enabling execution of client-side code. Documented impac...

CVE-2020-6956: Improper Neutralization of Input During Web Page Generation

PCS DEXICON 3.4.1 allows XSS via the loginName parameter in loginaction.jsp...

PT-2020-19305

Name of the Vulnerable Software and Affected Versions PCS DEXICON version 3.4.1 Description The issue allows for XSS via the loginName parameter in the "login action.jsp" endpoint. Recommendations For PCS DEXICON version 3.4.1, consider restricting access to the loginName parameter in the "login...