CVE-2022-39220 XSS Vulnerabilities in WebClient

SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting XSS vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds exist...

CVE-2022-39220

SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting XSS vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds exist...

CVE-2022-39220 XSS Vulnerabilities in WebClient

SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting XSS vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds exist...

GHSA-CF7G-CM7Q-RQ7F SFTPGo WebClient vulnerable to Cross-site Scripting

Impact Cross-site scripting XSS vulnerabilities have been reported to affect SFTPGo WebClient. If exploited, this vulnerability allows remote attackers to inject malicious code. Patches Fixed in v2.3.5...

SFTPGo WebClient vulnerable to Cross-site Scripting

Impact Cross-site scripting XSS vulnerabilities have been reported to affect SFTPGo WebClient. If exploited, this vulnerability allows remote attackers to inject malicious code. Patches Fixed in v2.3.5...

CVE-2022-39220: Improper Neutralization of Input During Web Page Generation

SFTPGo is an SFTP server written in Go. Versions prior to 2.3.5 are subject to Cross-site scripting XSS vulnerabilities in the SFTPGo WebClient, allowing remote attackers to inject malicious code. This issue is patched in version 2.3.5. No known workarounds exist...

PT-2022-24820 · Sftpgo · Sftpgo

Name of the Vulnerable Software and Affected Versions: SFTPGo versions prior to 2.3.5 Description: SFTPGo is an SFTP server written in Go. The SFTPGo WebClient is subject to Cross-site scripting XSS vulnerabilities, allowing remote attackers to inject malicious code. This issue is patched in...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

CVE-2022-35115

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

Sql injection

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

CVE-2022-35115

IceWarp WebClient DC2 Update 2 Build 9 (13.0.2.9) is affected by a SQL injection vulnerability exploitable via the search parameter in /webmail/server/webmail.php. The issue yields a CVSSv3.1 score of 9.8 (CRITICAL) with Network attack vector, no user interaction, and requires no privileges. The ...

IceWarp WebClient SQL Injection Vulnerability

IceWarp WebClient is a web-based mail service client from IceWarp, Inc. A security vulnerability exists in IceWarp WebClient DC2 version 13.0.2.9, which originates from an SQL injection vulnerability discovered via the search parameter of /webmail/server/webmail.php...

CVE-2022-35115: Improper Neutralization of Special Elements used in an SQL Command

IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...

PT-2022-22582

Name of the Vulnerable Software and Affected Versions IceWarp WebClient DC2 version 13.0.2.9 Description A SQL injection issue was found via the search parameter at the "/webmail/server/webmail.php" API endpoint. This allows for potential exploitation. Recommendations For IceWarp WebClient DC2...

This Week in Spring - August 1st, 2022

Aloha, Spring fans! Welcome to another installment of This Week in Spring! Im still on vacation on the beautiful island of Maui, Hawaii, but I wanted to say hello "aloha!" and share this weeks latest roundup of all thats good and glorious in the wide and wonderful world of Springdom. Funny thing,...

MAL-2022-3978 Malicious code in it-advisor-webclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfdca4e07e1507b2d32c614dfcc4517d60bda8bf0f7d7a8c44c1b29e70de263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in it-advisor-webclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfdca4e07e1507b2d32c614dfcc4517d60bda8bf0f7d7a8c44c1b29e70de263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1731

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist...

CVE-2022-1731

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist...