CVE-2025-71452

Vembu BDRSuite before version 7.6.0 is susceptible to an unauthenticated cross-site scripting (XSS) vulnerability within the templates/progress/clientside/restoreprogress.sgp component. The root cause is the unsanitized reflection of request parameters—specifically mn, rnm, isRepliRestore, rusr, ...

CVE-2025-71451

Vembu BDRSuite versions prior to 7.6.0 are vulnerable to an unauthenticated cross-site scripting (XSS) flaw in templates/progress/serverside/serverbackupprogress.sgp. The root cause is the unsanitized interpolation of request parameters—specifically ClientName , BackupName , and grpName —into loa...

CVE-2025-71451 Vembu BDRSuite < 7.6.0 XSS via serverbackupprogress.sgp

Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/serverside/serverbackupprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating request parameters such as ClientName, BackupName, and grpName that are...

CVE-2025-71452: Vembu Technologies BDRSuite: Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in…

Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/clientside/restoreprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating request parameters such as mn, rnm, isRepliRestore, rusr, and rpwd that are...

CVE-2025-71451: Vembu Technologies BDRSuite: Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in…

Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/serverside/serverbackupprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating request parameters such as ClientName, BackupName, and grpName that are...