9 matches found
EUVD-2020-6144
Malware in sbrugna...
CVE-2020-13972
Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951...
CVE-2020-13972
Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951...
PT-2020-13810
Name of the Vulnerable Software and Affected Versions Enghouse Web Chat version 6.2.284.34 Description The issue allows for cross-site scripting XSS when a user enters their own domain name in the WebServiceLocation parameter. The response from the POST request is displayed, and any JavaScript...
CVE-2020-13972: Improper Neutralization of Input During Web Page Generation
Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from the external server is executed in the browser. This is related to CVE-2019-16951...
Server side request forgery (ssrf)
An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network as opposed to what general web traffic would see...
CVE-2019-16948
An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network as opposed to what general web traffic would see...
CVE-2019-16948: Server-Side Request Forgery (SSRF)
An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network as opposed to what general web traffic would see...
PT-2019-14880
Name of the Vulnerable Software and Affected Versions Enghouse Web Chat version 6.1.300.31 Description A Server-Side Request Forgery SSRF issue allows an attacker to determine what is visible on the internal network by replacing the port number in the WebServiceLocation parameter of a POST reques...