Cross site scripting

An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview...

CVE-2024-22220

An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview...

PT-2024-19285 · Terminalfour · Terminalfour +1

Name of the Vulnerable Software and Affected Versions: Terminalfour versions 7.4 through 7.4.0004 QP3 Terminalfour versions 8 through 8.3.19 Formbank versions through 2.1.10-FINAL Description: An issue allows Unauthenticated Stored Cross-Site Scripting, potentially leading to Admin Session...

Terminalfour Security Vulnerability

Terminalfour is a digital marketing and web content management platform for higher education from US-based Terminalfour, Inc. A security vulnerability exists in Terminalfour versions 7.4 through 7.4.0004 QP3, and 8 through 8.3.19, which stems from the possibility of unauthenticated stored...

CVE-2024-22220

An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview...

CVE-2024-22220: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview...

CVE-2024-22220

Unauthenticated Stored Cross-Site Scripting (XSS) was discovered in Terminalfour and Formbank products. The vulnerability affects Terminalfour versions 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, as well as Formbank versions through 2.1.10-FINAL. Attackers can exploit the Form Builder and Form...

CVE-2023-29484

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...

CVE-2023-29484

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...

CVE-2023-29484

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...

Default credentials

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...

PT-2023-22276 · Terminalfour · Terminalfour

Name of the Vulnerable Software and Affected Versions: Terminalfour versions prior to 8.3.16 Description: The issue allows misconfigured LDAP users to login with an invalid password. Recommendations: For versions prior to 8.3.16, update to version 8.3.16 or later to resolve the issue...

CVE-2023-29484

In Terminalfour prior to 8.3.16, a misconfiguration in LDAP authentication allows misconfigured LDAP users to log in with an invalid password, enabling unauthorized access as described across multiple sources (CVE-2023-29484). The affected component is Terminalfour’s login/authentication flow; ro...

CVE-2023-29484

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...

Terminalfour Security Vulnerability

Terminalfour is a digital marketing and web content management platform for higher education from US-based Terminalfour. A security vulnerability exists in versions of Terminalfour prior to 8.3.16 that stems from a misconfigured LDAP user being able to log in with an invalid password...

CVE-2023-29484

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...

CVE-2023-29484: Incorrect Authorization

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...

Terminalfour Information Disclosure Vulnerability

Terminalfour is a digital marketing and web content management platform for higher education from Terminalfour, Inc. Terminalfour suffers from an information disclosure vulnerability that stems from insufficient protection of sensitive information when debug logging is enabled. An attacker could...

CVE-2023-23591

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...

CVE-2023-23591

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...