PT-2022-14080

Name of the Vulnerable Software and Affected Versions Metasonic Doc WebClient versions 7.0.3.0 through 7.0.14.0 Description The issue is related to a SQL injection attack in the username field. For the vulnerability to exist, either SSO or System authentication must be enabled. Recommendations Fo...

Allgeier Inovar Metasonic Doc WebClient SQL Injection Vulnerability

Allgeier Inovar Metasonic Doc WebClient is a mobile Enterprise Content Management ECM from Allgeier Inovar, Germany. It supports business processes by controlling publishing workflows. A security vulnerability exists in Allgeier Inovar Metasonic Doc WebClient versions 7.0.14.0, 7.0.12.0, and...

dev-python/twisted: secret exposure in cross-origin redirects

A flaw was found in the twisted Python library when WebClient redirects via the RedirectAgent and BrowserLikeRedirectAgent methods. This flaw allows an attacker to take advantage of these cross-origin redirects and leak the cookie and authorization headers...

ArchivistaBox webclient cross-site scripting vulnerability

ArchivistaBox webclient is a personal file management system from the Swiss company Archivista. cross-site scripting vulnerability exists in previous versions of ArchivistaBox webclient 2022/I, which stems from the program's lack of data validation filtering of user-supplied data and output. An...

CVE-2021-42552

Cross-site Scripting XSS vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I...

CVE-2021-42552

Cross-site Scripting XSS vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I...

Cross site scripting

Cross-site Scripting XSS vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I...

CVE-2021-42552 Reflected XSS in Archivista

Cross-site Scripting XSS vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I...

CVE-2021-42552

CVE-2021-42552 is a cross-site scripting (XSS) vulnerability in ArchivistaBox webclient. The issue arises from lack of data validation/filtering of user-supplied data, allowing an attacker to craft a malicious link that executes JavaScript in a victim’s browser. Affected are all ArchivistaBox ver...

CVE-2021-42552: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I...

PT-2022-11613

Name of the Vulnerable Software and Affected Versions ArchivistaBox versions prior to 2022/I Description A Cross-site Scripting XSS issue in the ArchivistaBox webclient allows an attacker to craft a malicious link that executes JavaScript in the context of a victim's browser. Recommendations For...

ArchivistaBox webclient cross-site scripting vulnerability

ArchivistaBox webclient is a personal file management system from the Swiss company Archivista. cross-site scripting vulnerability exists in previous versions of ArchivistaBox webclient 2022/I, which stems from the program's lack of data validation filtering of user-supplied data and output. An...

Siemens Polarion ALM Cross-Site Scripting Vulnerability

Polarion WebClient for SVN is an SVN client. A cross-site scripting vulnerability exists in Siemens Polarion ALM, which can be exploited by an attacker to execute arbitrary code and extract sensitive information by sending a crafted link to a user with administrator privileges...

CVE-2021-44478

A vulnerability has been identified in Polarion ALM All versions V21 R2 P2, Polarion WebClient for SVN All versions. A cross-site scripting is present due to improper neutralization of data sent to the web page through the SVN WebClient in the affected product. An attacker could exploit this to...

CVE-2021-44478

A vulnerability has been identified in Polarion ALM All versions V21 R2 P2, Polarion WebClient for SVN All versions. A cross-site scripting is present due to improper neutralization of data sent to the web page through the SVN WebClient in the affected product. An attacker could exploit this to...

Cross site scripting

A vulnerability has been identified in Polarion ALM All versions V21 R2 P2, Polarion WebClient for SVN All versions. A cross-site scripting is present due to improper neutralization of data sent to the web page through the SVN WebClient in the affected product. An attacker could exploit this to...

CVE-2021-44478

A vulnerability has been identified in Polarion ALM All versions V21 R2 P2, Polarion WebClient for SVN All versions. A cross-site scripting is present due to improper neutralization of data sent to the web page through the SVN WebClient in the affected product. An attacker could exploit this to...

CVE-2021-44478

CVE-2021-44478 affects Siemens Polarion ALM and its SVN WebClient: Cross-Site Scripting due to improper neutralization of data sent to web pages in the SVN WebClient. Affected: Polarion ALM (all versions prior to v21 R2 P2) and Polarion WebClient for SVN (all versions). Impact: could allow an att...

CVE-2021-44478: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in Polarion ALM All versions V21 R2 P2, Polarion WebClient for SVN All versions. A cross-site scripting is present due to improper neutralization of data sent to the web page through the SVN WebClient in the affected product. An attacker could exploit this to...

PT-2022-12127

Name of the Vulnerable Software and Affected Versions Polarion ALM versions prior to V21 R2 P2 Polarion WebClient for SVN all versions Description A cross-site scripting issue is present due to improper neutralization of data sent to the web page through the SVN WebClient in the affected product...