418 matches found
CVE-2019-13029
Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...
Cross site scripting
Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...
CVE-2019-13029
Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...
CVE-2019-13029
CVE-2019-13029 describes multiple stored XSS flaws in REDCap’s admin panel and survey system, affecting REDCap 8 prior to 8.10.20 and REDCap 9 prior to 9.1.2. The vulnerability allows an attacker with admin privileges to inject arbitrary HTML/JavaScript into a user’s browser, with the project nam...
CVE-2019-13029: Improper Neutralization of Input During Web Page Generation
Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...
PT-2019-13087
Name of the Vulnerable Software and Affected Versions REDCap versions 8.0.0 through 8.10.19 REDCap versions 9.0.0 through 9.1.1 Description The issue concerns multiple stored Cross-site scripting XSS problems in the admin panel and survey system. An attacker can inject arbitrary malicious HTML or...
CVE-Disclosures
CVE-Disclosures A repository of technical informat...
REDCap SQL Injection Vulnerability
REDCap is a free, secure, web-based application sponsored by a multi-institutional consortium at Vanderbilt University USA. It is designed to support data mining research. file upload handler is one of the file upload applications. A SQL injection vulnerability exists in file upload handler in...
CVE-2017-7351
A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload...
CVE-2017-7351
A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload...
Sql injection
A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload...
CVE-2017-7351
A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload...
CVE-2017-7351
REDCap 7.x is vulnerable to SQL injection in the file upload handler (SendITController:upload) prior to 7.0.11. The issue is triggered by a trailing substring in the upload endpoint, enabling an attacker to inject SQL through the file upload process. Impact: potential unauthorized database access...
PT-2018-8373
Name of the Vulnerable Software and Affected Versions REDCap versions 7.0.0 through 7.0.10 Description A SQL injection issue exists in the file upload handler via a trailing substring to the SendITController:upload endpoint. Recommendations For REDCap versions 7.0.0 through 7.0.10, update to...
CVE-2017-7351: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload...
REDCap Cross-Site Scripting Vulnerability
REDCap is a free, secure, web-based application. It is designed to support data mining research. A cross-site scripting vulnerability exists in versions of REDCap prior to 7.5.1. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML with the help of a query strin...
Design/Logic Flaw
REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components...
Spoofing
REDCap before 7.5.1 has XSS via the query string...