7 matches found
CVE-2024-41640
Description AML Surety Eco up to version 3.5 is affected by an un-authenticated reflected cross-site scripting. The target web application handles error in a dedicated error page accessible without any authentication containing a URL parameter that is not sanitizing user input. The provided...
CVE-2024-41640
Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...
CVE-2024-41640
Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...
PT-2024-29475 · Unknown · Aml Surety Eco
Name of the Vulnerable Software and Affected Versions: AML Surety Eco versions up to 3.5 Description: The issue allows an attacker to run arbitrary code via a crafted GET request using the id parameter. This is a Cross Site Scripting XSS issue. Recommendations: For AML Surety Eco versions up to...
CVE-2024-41640
CVE-2024-41640 documents confirm a Cross Site Scripting (XSS) vulnerability in AML Surety Eco, affected up to version 3.5. The vulnerability arises from the use of the id parameter in a crafted GET request, enabling an attacker to run arbitrary code. The connected sources consistently describe XS...
