9 matches found
CVE-2024-41640
Descripción AML Surety Eco hasta la versión 3.5 se ve afectado por una vulnerabilidad de cross-site scripting reflejado no autenticado. La aplicación web objetivo maneja errores en una página de error dedicada accesible sin ninguna autenticación que contiene un parámetro URL que no sanitiza la...
CVE-2024-41640
Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...
CVE-2024-41640
Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...
CVE-2024-41640: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...
PT-2024-29475 · Unknown · Aml Surety Eco
Name of the Vulnerable Software and Affected Versions: AML Surety Eco versions up to 3.5 Description: The issue allows an attacker to run arbitrary code via a crafted GET request using the id parameter. This is a Cross Site Scripting XSS issue. Recommendations: For AML Surety Eco versions up to...
CVE-2024-41640
The AML Surety Eco software (versions up to 3.5 ) is vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to sanitize user input in the id parameter within a dedicated error page (accessible via https:///Surety3Eco/AppError.aspx). An a...
AML Surety Eco 安全漏洞
AML Surety Eco is an end-to-end BSA/AML ecosystem from AML. A security vulnerability exists in AML Surety Eco version 3.5 and earlier, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to run arbitrary code via a specially crafted GET request...
