EUVD-2018-5201

Malware in sbrugna...

Design/Logic Flaw

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x is affected by a Cross-Site Scripting (XSS) vulnerability in the login page, exploitable via the name field of the omain or Computer Name field. The Connected CNVD entry confirms a 5.x version impact and remote code execution is described as possible through the ...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252: Improper Neutralization of Input During Web Page Generation

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

PT-2018-11720

Name of the Vulnerable Software and Affected Versions Entrust Datacard Syntera CS versions 5.x Description The issue is related to a cross-site scripting XSS problem. It occurs via the name field of "Domain or Computer Name" in the login page. Recommendations For versions 5.x, update to a version...