EUVD-2019-19197

Malware in sbrugna...

CVE-2019-9838

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9839

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

CVE-2019-9838

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9838

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9838

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9839

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

PT-2019-19887

Name of the Vulnerable Software and Affected Versions VFront version 0.99.5 Description The issue concerns a stored XSS that occurs via the azzera parameter in the "admin/sync reg tab.php" page, which is mishandled during the rendering of "admin/error log.php". Recommendations For VFront version...

CVE-2019-9838: Improper Neutralization of Input During Web Page Generation

VFront 0.99.5 has stored XSS via the admin/syncregtab.php azzera parameter, which is mishandled during admin/errorlog.php rendering...

CVE-2019-9839: Improper Neutralization of Input During Web Page Generation

VFront 0.99.5 has Reflected XSS via the admin/menuregistri.php descrizioneg parameter or the admin/syncregtab.php azzera parameter...

PT-2019-19888

Name of the Vulnerable Software and Affected Versions VFront version 0.99.5 Description The issue concerns a Reflected XSS that can be triggered via specific parameters in certain PHP files. Specifically, the descrizione g parameter in the "admin/menu registri.php" file or the azzera parameter in...