CVE-2021-28901

Multiple cross-site scripting XSS vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the 1 NOMCLI , 2 ADRESSE , 3 ADRESSE2, 4 LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the 5 nomlis...

CVE-2021-28901

Multiple cross-site scripting XSS vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the 1 NOMCLI , 2 ADRESSE , 3 ADRESSE2, 4 LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the 5 nomlis...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the 1 NOMCLI , 2 ADRESSE , 3 ADRESSE2, 4 LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the 5 nomlis...

CVE-2021-28901

SITA Software Azur CMS (variant: 1.2.3.1 and earlier) exposes multiple cross-site scripting (XSS) vulnerabilities. The issue stems from insufficient validation/filtering of input parameters, allowing remote attackers to inject arbitrary script/HTML via: NOM_CLI, ADRESSE, ADRESSE2, LOCALITE to /es...

CVE-2021-28901: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the 1 NOMCLI , 2 ADRESSE , 3 ADRESSE2, 4 LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the 5 nomlis...

PT-2021-17978

Name of the Vulnerable Software and Affected Versions: SITA Software Azur CMS versions 1.2.3.1 and earlier Description: Multiple cross-site scripting XSS vulnerabilities exist, allowing remote attackers to inject arbitrary web script or HTML via the NOM CLI, ADRESSE, ADRESSE2, LOCALITE parameters...