CVE-2021-39420

Multiple Cross Site Scripting XSS vulnerabilities exist in VFront 0.99.5 via the 1 s parameter in searchall.php and the 2 msg parameter in add.attach.php...

CVE-2021-39420

CVE-2021-39420 affects VFront 0.99.5 and is a cross-site scripting (XSS) vulnerability exposed via two input vectors: the s parameter in search_all.php and the msg parameter in add.attach.php. The public descriptions indicate XSS; no exploitation details or patch/version remediation are provided ...

VFront Cross-Site Script Vulnerabilities

vfront is a free open source front-end for MySQL or PostgreSQL databases written in PHP and Javascript. vfront version 0.99.5 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the s parameter in...

PT-2021-22584

Name of the Vulnerable Software and Affected Versions: VFront version 0.99.5 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in the software via the s parameter in "search all.php" and the msg parameter in "add.attach.php". Recommendations: For VFront version 0.99.5, consider...

CVE-2021-39420: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in VFront 0.99.5 via the 1 s parameter in searchall.php and the 2 msg parameter in add.attach.php...

Cross site scripting

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9838

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

Cross site scripting

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

CVE-2019-9839

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

CVE-2019-9839

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

CVE-2019-9838

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9838

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9838

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9838

Summary: CVE-2019-9838 affects VFront 0.99.5 with a stored XSS vulnerability. The issue occurs in the parameter azzera of admin/sync_reg_tab.php and is mishandled during rendering in admin/error_log.php. Affected software: VFront 0.99.5 (PHP/JavaScript front-end tooling for MySQL/PostgreSQL). Roo...

CVE-2019-9839

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

CVE-2019-9839

VFront 0.99.5 is affected by a Reflected Cross‑Site Scripting (XSS) vulnerability. The issue is triggered via the admin/menu_registri.php descrizione_g parameter or the admin/sync_reg_tab.php azzera parameter. Public references describe it as a reflected XSS with proof patterns such as [removed]a...

CVE-2019-9839

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

PT-2019-19887

Name of the Vulnerable Software and Affected Versions VFront version 0.99.5 Description The issue concerns a stored XSS that occurs via the azzera parameter in the "admin/sync reg tab.php" page, which is mishandled during the rendering of "admin/error log.php". Recommendations For VFront version...

CVE-2019-9839: Improper Neutralization of Input During Web Page Generation

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

CVE-2019-9838: Improper Neutralization of Input During Web Page Generation

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...