CVE-2020-26584

An issue was discovered in Sage DPW 202006x before 202006002. The search field "Kurs suchen" on the page Kurskatalog is vulnerable to Reflected XSS. If the attacker can lure a user into clicking a crafted link, he can execute arbitrary JavaScript code in the user's browser. The vulnerability can ...

CVE-2020-26584

The CVE-2020-26584 issue affects Sage DPW 2020_06_x prior to 2020_06_002, where the search field “Kurs suchen” in Kurskatalog is vulnerable to Reflected XSS. If a user is lured into a crafted link, an attacker can execute arbitrary JavaScript in the browser, potentially altering the displayed pag...

Sage DPW 2020_06_000 / 2020_06_001 XSS / File Upload

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected Cross-Site Scripting and Unauthenticated Malicious File Upload product: Sage DPW vulnerable version: 202006000 & 202006001 fixed version: 202006002 CVE number:...