23 matches found
CVE-2025-63724
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63724
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-63724
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
PT-2025-46995
Name of the Vulnerable Software and Affected Versions SVX Portal version 2.7A Description A SQL injection flaw exists in SVX Portal version 2.7A. This issue is triggered by a specially crafted POST request sent to the /admin/update setings.php endpoint. Successful exploitation could allow an...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63725: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63725
A Reflected Cross-Site Scripting (XSS) vulnerability exists in SVX Portal version 2.7A . The root cause is the improper neutralization of input in the id parameter within the Recivers.php file, which allows an attacker to inject and execute malicious scripts. To remediate this issue, it is recomm...
CVE-2025-63724
SVX Portal version 2.7A contains a SQL injection vulnerability (CWE-89) triggered by a specially crafted POST request to the admin/update_setings.php endpoint. Successful exploitation allows an attacker to manipulate database queries . As a temporary workaround, it is recommended to restrict acce...
CVE-2025-63724
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-63725
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
CVE-2025-63724: Improper Neutralization of Special Elements used in an SQL Command
SQL injection SQL-i vulnerability in SVX Portal 2.7A via crafted POST request to admin/updatesetings.php...
CVE-2025-61532
Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...
CVE-2025-61532
Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...
CVE-2025-61532
Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...
CVE-2025-61532
Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...
