300 matches found
Webform Report - Critical - Unsupported - SA-CONTRIB-2019-086
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466procedure---own-project---unsupported...
The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, allows attackers to disclose protected information.
The vulnerability of the .NET SDK WebForm Viewer component, a software tool for report development with SAP Crystal Reports for Visual Studio, is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, includin...
CVE-2019-0285
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio fixed in version 2010 discloses sensitive database information including credentials which can be misused by the attacker...
CVE-2019-0285
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio fixed in version 2010 discloses sensitive database information including credentials which can be misused by the attacker...
Information disclosure
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio fixed in version 2010 discloses sensitive database information including credentials which can be misused by the attacker...
CVE-2019-0285
SAP Crystal Reports for Visual Studio contains a vulnerability in the .NET SDK WebForm Viewer where the viewer discloses sensitive database information, including credentials. The issue affects the WebForm Viewer component used by the SAP Crystal Reports for Visual Studio environment and is descr...
CVE-2019-0285: Cleartext Storage of Sensitive Information
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio fixed in version 2010 discloses sensitive database information including credentials which can be misused by the attacker...
CVE-2017-11175
In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login...
Authentication flaw
In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login...
CVE-2017-11175
CVE-2017-11175 affects J2 Innovations FIN Stack 4.0. The vulnerability is a reflected XSS in the authentication webform, exploitable via a crafted query string to /login (or /auth/ariosa/login per related CNVD entry). The root cause is input reflected back to the user without proper sanitization,...
CVE-2017-11175
In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login...
CVE-2016-0223
Cross-site scripting XSS vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110006...
CVE-2016-0223
Cross-site scripting XSS vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110006...
CVE-2016-0223
Cross-site scripting XSS vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110006...
CVE-2016-0223
CVE-2016-0223 affects IBM Forms Server (Webform Framework API) on 4.0., 8.0. , 8.1, 8.2. The vulnerability arises from improper validation of user-supplied input, allowing a remote attacker to execute arbitrary script via a specially crafted URL, i.e., a cross-site scripting (XSS) flaw. Impact in...
CVE-2016-0223
Cross-site scripting XSS vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110006...
CVE-2016-0223: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110006...
Adobe CreativeCloud (Webform) - Persistent Vulnerability
Document Title: =============== Adobe CreativeCloud Webform - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1848 Release Date: ============= 2018-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 184...
Webform Multiple file upload - Moderately Critical - Access bypass - SA-CONTRIB-2017-045
This module enables you to upload multiple files at once in a webform. The module doesn't sufficiently check access to file deletion urls. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to edit all or their own webform submissions. CVE identifier...
U.S. Dept Of Defense: Arbitrary Script Injection (Mail) in a DoD Website
A DoD website was misconfigured in a manner that could have allowed an attacker to inject malicious code into automated emails sent by the server. @ahsantahir was able to demonstrate this vulnerability by posting a specially formatted webform. Thanks @ahsantahir!...