CVE-2021-31794

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header...

EUVD-2021-18675

Malware in sbrugna...

Directum Cross-Site Scripting Vulnerability

Directum is an application system of the Russian company Directum. An intelligent digital process and documentation system. A cross-site scripting vulnerability exists in Settings.aspx?view=About in Directum version 5.8.2. An attacker can exploit this vulnerability via the HTTP User-Agent header ...

CVE-2021-31794

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header...

CVE-2021-31794

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header...

Cross site scripting

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header...

CVE-2021-31794

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header...

CVE-2021-31794

CVE-2021-31794 is a cross-site scripting vulnerability in Directum 5.8.2, where an attacker can trigger XSS through the HTTP User-Agent header in the Settings.aspx?view=About page. The vulnerability is described across multiple connected records as affecting Directum version 5.8.2 and enabling sc...

Directum 跨站脚本漏洞

Directum is an application system of the Russian company Directum. An intelligent digital process and documentation system. A cross-site scripting vulnerability exists in Settings.aspx?view=About in Directum version 5.8.2. An attacker can exploit this vulnerability via the HTTP User-Agent header ...

The vulnerability of the web access module of the DIRECTUM electronic document management system allows a hacker to obtain the name of the last authorized user.

The vulnerability of the web access module of the DIRECTUM electronic document management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to obtain the name of the last authorized user who accessed the system remotely...

The vulnerability of the web access module of the DIRECTUM electronic document management system allows a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the web access module of the DIRECTUM electronic document management system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...