Serpico Cross-Site Scripting Vulnerability (CNVD-2020-03856)

Serpico is a penetration test report generation and collaboration tool. A cross-site scripting vulnerability exists in Serpico version 1.3.0 in admin/listuser, which stems from the lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

PT-2020-10262

Name of the Vulnerable Software and Affected Versions Serpico version 1.3.0 Description An issue was discovered in Serpico, allowing stored XSS via the auth type parameter in the admin/list user endpoint. Recommendations For Serpico version 1.3.0, consider restricting access to the admin/list use...

PT-2020-10263

Name of the Vulnerable Software and Affected Versions Serpico version 1.3.0 Description An issue was discovered that allows stored XSS via the type parameter in the User Type on the "admin/list user" page. Recommendations For Serpico version 1.3.0, consider restricting access to the "admin/list...