CVE-2025-59748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' and 'reset' parameters in...

thegateway.org XSS vulnerability

Open Bug Bounty ID: OBB-558171 Description| Value ---|--- Affected Website:| thegateway.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2004-1648

CVE-2004-1648 is a cross-site scripting (XSS) vulnerability in Password Protect affecting multiple ASP pages (index.asp, ChangePassword.asp, users_list.asp, users_add.asp) via the ShowMsg parameter. The issue is documented across CVE entries (NVD, CVE List) with a MEDIUM severity (CVSS v2 base sc...

CVE-2004-1648: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1 index.asp, 2 ChangePassword.asp, 3 userslist.asp, 4 and usersadd.asp in Password Protect allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter...