Aryanic HighMail (High CMS) - Cross-Site Scripting

A cross-site scripting vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm. id: CVE-2020-23517 info: name: Aryanic HighMail High CMS - Cross-Site Scripting author: geeknik severity: medium...

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

EUVD-2018-9704

Malware in sbrugna...

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

CVE-2020-23517

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

CVE-2020-23517

Aryanic HighMail (High CMS) is affected by CVE-2020-23517, a cross-site scripting (XSS) vulnerability in versions 2020 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the 'user' parameter on the LoginForm. In published details, exploitation could enable a...

EUVD-2020-16261

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

CVE-2020-23517: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...

Aryanic HighMail 跨站脚本漏洞

Arianik Aryanic HighMail is an application from Arianik Iran. It is used to send and receive e-mail. A security vulnerability exists in Aryanic HighMail versions 2020, which allows remote attackers to inject arbitrary web script or HTML via the "user" to login to the inform...

PT-2021-10903

Name of the Vulnerable Software and Affected Versions Aryanic HighMail High CMS versions 2020 and before Description The issue allows remote attackers to inject arbitrary web script or HTML via the user variable to the LoginForm, enabling Cross Site Scripting XSS attacks. Recommendations For...

Aryanic HighPortal Cross-Site Scripting Vulnerability

Aryanic HighPortal is an enterprise portal system based on Java and ASP.NET. A cross-site scripting vulnerability exists in Aryanic HighPortal version 12.5. A remote attacker can exploit this vulnerability by adding tags to inject arbitrary web script or HTML...

CVE-2018-17964

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

CVE-2018-17964

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

Deserialization of untrusted data

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

CVE-2018-17964

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

CVE-2018-17964

CVE-2018-17964 affects Aryanic HighPortal 12.5. The vulnerability is a Cross‑Site Scripting (XSS) flaw that can be triggered via the Add Tags action, enabling injection of arbitrary script/HTML. Public sources in CNVD/NVD describe HighPortal 12.5 as vulnerable to XSS, with the remote attacker abl...

PT-2018-14301

Name of the Vulnerable Software and Affected Versions Aryanic HighPortal version 12.5 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via an Add Tags action, allowing potential exploitation. Recommendations For version 12.5, consider disabling the Add Tags action...

CVE-2018-17964: Improper Neutralization of Input During Web Page Generation

Aryanic HighPortal 12.5 has XSS via an Add Tags action...

HighPortal 12.5 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Vulnerable Product: HighPortal Affected version: 12.5 Vulnerability Type: XSS CVE: CVE-2018-17964 CWE: CWE-79 Credit: Ali Abdollahi Remote: Yes Description:XSS vulnerability on Aryanic HighPortal version 12.5 via an Add Tags action.Contact:...