23 matches found
EUVD-2014-8108
Malware in sbrugna...
EUVD-2014-8107
Malware in sbrugna...
EUVD-2014-8109
Malware in sbrugna...
CVE-2014-8268
QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request...
CVE-2014-8267
Cross-site scripting XSS vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter...
CVE-2014-8266
Multiple cross-site scripting XSS vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body field...
Cross site scripting
Cross-site scripting XSS vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter...
Server side request forgery (ssrf)
QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request...
CVE-2014-8268
QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request...
CVE-2014-8267
Cross-site scripting XSS vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter...
CVE-2014-8266
Multiple cross-site scripting XSS vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body field...
CVE-2014-8267
CVE-2014-8267 is a reflected XSS vulnerability affecting QPR Portal 2014.1.1 and earlier, exploitable via the RID parameter. The issue, confirmed across multiple sources (NVD entry and CERT advisory), allows remote attackers to inject arbitrary script/HTML in the victim’s browser. The risk is des...
CVE-2014-8268
QPR Portal CVE-2014-8268 is an authorization-bypass flaw in which an unauthenticated attacker could modify or delete notes by directly referencing identifiers in versions 2012.0-era and older (not affected in 2012.2.1+). The issue is documented as an authorization bypass via a user-controlled key...
CVE-2014-8266
CVE-2014-8266 is an XSS vulnerability in QPR Portal 2014.1.1 and earlier, affecting the note-creation page: attacker-supplied input in the title or body can inject script/HTML. The NVD entry describes multiple XSS vectors with a base CVSS v2 score of 4.3 (MEDIUM) and no data for exploitation stat...
CVE-2014-8266: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body field...
PT-2015-4030
Name of the Vulnerable Software and Affected Versions QPR Portal versions 2014.1.1 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the RID parameter. This could potentially lead to unauthorized actions on the affected...
PT-2015-4031
Name of the Vulnerable Software and Affected Versions QPR Portal versions prior to 2012.2.1 Description The issue allows remote attackers to modify or delete notes by making a direct request. Recommendations For versions prior to 2012.2.1, update to version 2012.2.1 or later to resolve the issue...
PT-2015-4029
Name of the Vulnerable Software and Affected Versions QPR Portal versions 2014.1.1 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the note-creation page. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the...
CVE-2014-8268: Undefined Security Weakness
QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request...
CVE-2014-8267: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter...