CVE-2024-41640

Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...

CVE-2024-41640

Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...

CVE-2024-41640

Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...

AML Surety Eco 安全漏洞

AML Surety Eco is an end-to-end BSA/AML ecosystem from AML. A security vulnerability exists in AML Surety Eco version 3.5 and earlier, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to run arbitrary code via a specially crafted GET request...

CVE-2024-41640

CVE-2024-41640 documents confirm a Cross Site Scripting (XSS) vulnerability in AML Surety Eco, affected up to version 3.5. The vulnerability arises from the use of the id parameter in a crafted GET request, enabling an attacker to run arbitrary code. The connected sources consistently describe XS...

CVE-2024-41640

Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...

PT-2024-29475 · Unknown · Aml Surety Eco

Name of the Vulnerable Software and Affected Versions: AML Surety Eco versions up to 3.5 Description: The issue allows an attacker to run arbitrary code via a crafted GET request using the id parameter. This is a Cross Site Scripting XSS issue. Recommendations: For AML Surety Eco versions up to...