EUVD-2019-16959

Malware in sbrugna...

PT-2019-18591

Name of the Vulnerable Software and Affected Versions Ericsson Active Library Explorer ALEX version 14.3 Description A security issue exists in the software, where an XSS issue is present in multiple parameters of the "/cgi-bin/alexserv" servlet. The affected parameters include DB, FN, fn, and id...

CVE-2019-7417: Improper Neutralization of Input During Web Page Generation

XSS exists in Ericsson Active Library Explorer ALEX 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter...

Ericsson Active Library Explorer (ALEX) 14.3 Cross Site Scripting

!-- Exploit Title: Cross Site Scripting in Ericsson Active Library Explorer Server Version 14.3 Date: 23-01-2019 Exploit Author: Rafael Pedrero Vendor Homepage: http://www.ericsson.com Software Link: http://www.ericsson.com Version: Ericsson Active Library Explorer Server Version 14.3 Tested on:...