EUVD-2019-2080

Malware in sbrugna...

Cross site scripting

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

CVE-2019-10016

CVE-2019-10016 affects GForge Advanced Server 6.4.4. The vulnerability is a cross-site scripting (XSS) flaw in the commonsearch.php code path, caused by inadequate filtering of user-submitted HTML in the words parameter. An attacker can remotely exploit the flaw by supplying crafted input via the...

CVE-2019-10016

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

PT-2019-11288

Name of the Vulnerable Software and Affected Versions: GForge Advanced Server version 6.4.4 Description: The issue allows for XSS via the words parameter in the commonsearch.php file. This can be demonstrated by a snippet/search/?words= substring. Recommendations: For GForge Advanced Server versi...

CVE-2019-10016: Improper Neutralization of Input During Web Page Generation

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...