EUVD-2020-23069

Malware in sbrugna...

CVE-2020-35395

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

CVE-2020-35395

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

Code injection

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

PT-2020-17323

Name of the Vulnerable Software and Affected Versions EGavilan Media Expense Management System version 1.0 Description The issue allows an attacker to permanently store malicious JavaScript code via the description field in the Add Expense Component. This enables the attacker to execute the...

CVE-2020-35395: Improper Neutralization of Input During Web Page Generation

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...