23 matches found
CVE-2025-63724
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63724
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-63724
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63724
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-63724: Improper Neutralization of Special Elements used in an SQL Command
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-63725: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63724
SVX Portal version 2.7A contains a SQL injection vulnerability (CWE-89) triggered by a specially crafted POST request to the admin/update_setings.php endpoint. Successful exploitation allows an attacker to manipulate database queries . As a temporary workaround, it is recommended to restrict acce...
PT-2025-46995
Name of the Vulnerable Software and Affected Versions SVX Portal version 2.7A Description A SQL injection flaw exists in SVX Portal version 2.7A. This issue is triggered by a specially crafted POST request sent to the /admin/update setings.php endpoint. Successful exploitation could allow an...
CVE-2025-63725
A Reflected Cross-Site Scripting (XSS) vulnerability exists in SVX Portal version 2.7A . The root cause is the improper neutralization of input in the id parameter within the Recivers.php file, which allows an attacker to inject and execute malicious scripts. To remediate this issue, it is recomm...
CVE-2025-61532
Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...
CVE-2025-61532
Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...
CVE-2025-61532
Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...
CVE-2025-61532
A Cross Site Scripting (XSS) vulnerability exists in SVX Portal v.2.7A within the last_heard_page.php component. The flaw allows for the execution of arbitrary code through the manipulation of the TG parameter. To remediate this issue, it is recommended to update to a newer version of the softwar...
