PT-2026-39608

A reflected cross-site scripted XSS vulnerability in the dfm-menu alerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-65418: Improper Limitation of a Pathname to a Restricted Directory

docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url...

CVE-2025-65415: Session Fixation

docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...

CVE-2025-61313: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripted XSS vulnerability in the dfm-menumarkeralerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61312: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripted XSS vulnerability in the acc-menupricess.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61311: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripted XSS vulnerability in the dfm-menualerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61310: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripted XSS vulnerability in the acc-menubillings.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61309: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripted XSS vulnerability in the dfm-menudepartments.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61307: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripted XSS vulnerability in the acc-menupapers.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61306: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripted XSS vulnerability in the dfm-menucoveragealerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable valu...

PT-2026-39612

docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...

CVE-2025-61306

A reflected cross-site scripted XSS vulnerability in the dfm-menucoveragealerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable valu...

CVE-2025-61308

A reflected cross-site scripted XSS vulnerability in the dfm-menumaintenance.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61305

A reflected cross-site scripted XSS vulnerability in the dfm-menufirmware.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

docuForm FSM Server Authorization Vulnerability

The docuForm FSM Server is a server-side system developed by the German company docuForm, designed for enterprise document processing and form workflow management. The version 11.11c of the docuForm FSM Server has an authorization vulnerability, which stems from a session fixation attack present ...

docuForm FSM Server Cross-site Scripting Vulnerability

The docuForm FSM Server is a server-side system developed by the German company docuForm, designed for enterprise document processing and form workflow management. The version 11.11c of the docuForm FSM Server contains a cross-site scripting vulnerability. This vulnerability originates from the...

CVE-2025-61305

A reflected cross-site scripted (XSS) vulnerability exists in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) version v11.11c . The root cause is the handling of unfiltered variable values , which allows an attacker to inject a crafted payload and execute arbi...

CVE-2025-61309

A reflected cross-site scripted (XSS) vulnerability exists in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c . The root cause is the use of unfiltered variable values , which allows an attacker to inject a crafted payload and execute arbitrary Java...

CVE-2025-61310

The docuForm FSM Server (GmbH Mecury Managed Print Services) version v11.11c is vulnerable to a reflected cross-site scripted (XSS) vulnerability in the acc-menu_billings.php component. The flaw is caused by the application's failure to filter variable values, which allows an attacker to inject a...

CVE-2025-61308

The docuForm FSM Server (GmbH Mecury Managed Print Services), specifically version v11.11c , contains a reflected cross-site scripted (XSS) vulnerability in the dfm-menu_maintenance.php component. The root cause is the improper neutralization of input during web page generation, where an unfilter...