21 matches found
CVE-2020-10540
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules...
EUVD-2020-2993
Malware in sbrugna...
EUVD-2020-15213
Malware in sbrugna...
CVE-2020-22453
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...
Untis WebUntis Cross-Site Scripting Vulnerability
Untis WebUntis is an individual developer's is a tool for schools to publish electronic timetables like students. A cross-site scripting vulnerability exists in Untis WebUntis versions prior to 2020.9.6, which stems from a lack of proper validation of client-side data by the web application. An...
CVE-2020-22453
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...
CVE-2020-22453
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...
Cross site scripting
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...
CVE-2020-22453
Untis WebUntis before 2020.9.6 is affected by a Cross-Site Scripting (XSS) vulnerability in multiple functions that store information, arising from lack of proper validation of client-side data. This can allow execution of client-side code. The issue is addressed by upgrading to version 2020.9.6 ...
CVE-2020-22453
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...
CVE-2020-22453: Improper Neutralization of Input During Web Page Generation
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information...
PT-2020-15467
Name of the Vulnerable Software and Affected Versions WebUntis versions prior to 2020.9.6 Description The issue allows for XSS in multiple functions that store information. Recommendations For versions prior to 2020.9.6, update to version 2020.9.6 or later to resolve the issue...
WebUntis 2020.12.1 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications I. VULNERABILITY ------------------------- WebUntis 2020.12.1 - Authenticated Cross Site Scripting II. BACKGROUND ------------------------- WebUntis is a tool for schools and universities to deliver electronic timetables to their students...
WebUntis 2020.12.1 Cross Site Scripting
I. VULNERABILITY ------------------------- WebUntis 2020.12.1 - Authenticated Cross Site Scripting II. BACKGROUND ------------------------- WebUntis is a tool for schools and universities to deliver electronic timetables to their students. Depending from the activated modules it does also contain...
CVE-2020-10540
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules...
CVE-2020-10540
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules...
Cross site request forgery (csrf)
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules...
CVE-2020-10540
CVE-2020-10540 affects Untis WebUntis prior to version 2020.9.6 and is characterized by a CSRF vulnerability for certain combinations of rights and modules. The NVD records a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW complexity, no privileges required, and user interactio...