Design/Logic Flaw

xfind/search in Ximdex 4.0 has XSS via the filternvalue parameters for non-negative values of n, as demonstrated by n equal to 0 through 12...

CVE-2018-12047

XIMDEX XSS (CVE-2018-12047) affects Ximdex 4.0, specifically the xfind/search functionality. The vulnerability is a cross-site scripting flaw triggered via the filter[n][value] parameters with non-negative n (as demonstrated for n = 0–12), enabling arbitrary script injection on the search page. T...

CVE-2018-12047

xfind/search in Ximdex 4.0 has XSS via the filternvalue parameters for non-negative values of n, as demonstrated by n equal to 0 through 12...

Ximdex cross-site scripting vulnerability (CNVD-2018-14436)

Ximdex is a content and data management system. The system includes features such as an intelligent search engine, information aggregation, image and text recognition. A cross-site scripting vulnerability exists in the search page in Ximdex version 4.0. A remote attacker can exploit this...

CVE-2018-11735

index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter...

CVE-2018-11735

index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter...

CVE-2018-11735

CVE-2018-11735 affects Ximdex 4.0. The vulnerability is a Cross-Site Scripting (XSS) on the account creation page (index.php?action=createaccount) via the sname or fname parameters. The root cause is an unsanitized/inadequately escaped user input in these fields, enabling arbitrary script injecti...

CVE-2018-11735

index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter...

Ximdex Cross-Site Scripting Vulnerability

Ximdex is a content and data management system. The system includes features such as an intelligent search engine, information aggregation, image and text recognition. A cross-site scripting vulnerability exists in the account creation page in Ximdex version 4.0. A remote attacker can exploit thi...