CVE-2020-5225

Log injection in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script, which receives error reports and sends them via email to the system administrator, did not properly sanitize the report identifier obtained from the request. This allows an attacker, under specific circumstances,...

PT-2020-18321

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions up to 1.18.3 Description The issue concerns log injection in SimpleSAMLphp. The www/errorreport.php script did not properly sanitize the reportID parameter obtained from the request, allowing an attacker to inject new lo...

Cross site scripting

A Reflected Cross Site Scripting XSS vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter...

CVE-2018-12653

A Reflected Cross Site Scripting XSS vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter...

CVE-2018-12653

CVE-2018-12653 affects Adrenalin HRMS/Core HCM 5.4.0. A Reflected Cross-Site Scripting (XSS) exists on the page at RPT/SSRSDynamicEditReports.aspx via the ReportId parameter, where user-supplied input is echoed back in the HTML response. The vulnerability allows an attacker to submit malicious Ja...

PT-2019-8915

Name of the Vulnerable Software and Affected Versions Adrenalin HRMS version 5.4.0 Description A Reflected Cross Site Scripting issue exists, allowing an attacker to input malicious JavaScript code in the "/RPT/SSRSDynamicEditReports.aspx" API endpoint via the ReportId parameter. Recommendations...

CVE-2018-12653: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting XSS vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter...

CVE-2018-11140

The 'reportID' parameter received by the '/common/runreport.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection in particular, an error-based type...

PT-2018-10332

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue concerns the '/common/run report.php' script, where the reportID parameter is not properly sanitized. This leads to a SQL injection vulnerability, specifically an...

CVE-2018-11140: Improper Neutralization of Special Elements used in an SQL Command

The 'reportID' parameter received by the '/common/runreport.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection in particular, an error-based type...

The vulnerability of the reportId parameter in the getReportStatus method of the Kaspersky Anti-Virus for Linux File Server antivirus protection tool allows a hacker to access and read arbitrary files.

The vulnerability of the reportId parameter in the getReportStatus method of the Kaspersky Anti-Virus for Linux File Server antivirus tool is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files wit...

PT-2017-2932

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus for Linux File Server versions prior to 8.0.4.312 Description The issue is related to the reportId parameter of the getReportStatus action method in the web interface, which can be exploited to read arbitrary files with...