Cross site scripting

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

CVE-2020-6213

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

CVE-2020-6213: Improper Neutralization of Input During Web Page Generation

SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXTPHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting XSS via different URL parameters as it does not sufficiently encode user controlled inputs...

PT-2020-19012

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT PHTMLB versions 700 through 754 Description The issue is related to reflected Cross-Site Scripting XSS due to insufficient encoding of user-controlled inputs via different UR...

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

Remote code execution

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

CVE-2020-10211

Mitel MiVoice Connect (UCB component) is affected by CVE-2020-10211, prior to version 19.1 SP1. The issue stems from insufficient validation of URL parameters, enabling an unauthenticated remote attacker to execute arbitrary scripts. Reported impact includes access to sensitive information and po...

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

CVE-2020-10211: Improper Input Validation

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

PT-2020-11977

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect versions prior to 19.1 SP1 Description A remote code execution issue exists due to insufficient validation of URL parameters in the UCB component. This could allow an unauthenticated remote attacker to execute arbitrary...

Open Redirection

centreon/centreon is vulnerable to open redirection. A hidden parameter p allows an attacker to add additional URL parameters using the URL encoded & character and redirect users to an arbitrary page. This vulnerability can be leveraged to execute arbitrary code on the system when a privileged us...

CVE-2019-10221

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a...

CVE-2019-10221

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a...

CVE-2019-10221: Improper Neutralization of Input During Web Page Generation

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a...

PT-2020-9059

Name of the Vulnerable Software and Affected Versions pki-core versions 10.x.x Description A Reflected Cross Site Scripting issue was found in the pki-ca module of the pki-core server, caused by missing sanitization of the GET URL parameters. An attacker could exploit this flaw to trick an...

CVE-2019-19336: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the...

Cross site scripting

The SAP Commerce Testweb Extension, versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlled inputs, due to which certain GET URL parameters are reflected in the HTTP responses without escaping/sanitization, leading to Reflected Cross Site Scripting...

CVE-2020-6201: Improper Neutralization of Input During Web Page Generation

The SAP Commerce Testweb Extension, versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlled inputs, due to which certain GET URL parameters are reflected in the HTTP responses without escaping/sanitization, leading to Reflected Cross Site Scripting...

PT-2020-19002

Name of the Vulnerable Software and Affected Versions SAP Commerce Testweb Extension versions 6.6, 6.7, 1808, 1811, 1905 Description The issue arises from insufficient encoding of user-controlled inputs. Certain GET URL parameters are reflected in the HTTP responses without proper escaping or...