CVE-2025-65417

The docuFORM Managed Print Service Client (version 11.11c ) is vulnerable to a reflected cross-site scripting (XSS) attack. The flaw originates from the login page of the application, where improper neutralization of input during web page generation allows an attacker to reflect malicious scripts...

CVE-2025-61313

The docuForm FSM Server (version v11.11c ), a server-side system for enterprise document processing and workflow management developed by GmbH Mecury Managed Print Services , is vulnerable to a reflected cross-site scripted (XSS) vulnerability. This flaw exists in the dfm-menu_markeralerts.php com...

CVE-2025-65415

The docuFORM Managed Print Service Client (version 11.11c ) is vulnerable to a session fixation attack. This vulnerability exists on the application's login page and can lead to an authorization issue, potentially allowing an attacker to hijack a user session. Exploitation details or specific mit...

CVE-2025-65416

The docuFORM Managed Print Service Client (specifically version 11.11c ) contains a code vulnerability that allows for arbitrary file upload via the pmupdate.php file. This vulnerability is present in the server-side system developed by the German company docuFORM , which is used for enterprise d...

docuFORM Mercury WebApp 6.16a/5.20 Multiple XSS Vulnerabilities

No description provided by source. !-- docuFORM Mercury WebApp 6.16a/5.20 Multiple Cross-Site Scripting Vulnerabilities Vendor: docuFORM GmbH Product web page: http://www.docuform.de Affected version: 6.16a and 5.20 Summary: Unlimited options for production printing and customer solutions. Desc:...

docuFORM Mercury Multiple XSS Vulnerabilities

docuFORM Mercury is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

docuFORM Mercury WebApp 6.16a/5.20 Multiple XSS Vulnerabilities

Exploit for php platform in category web applications docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; alert1" / input type="hidd...

docuFORM Mercury WebApp 6.16a5.20 - Multiple Cross-Site Scripting Vulnerabilities

docuFORM Mercury WebApp 6.16a5.20 - Multiple Cross-Site Scripting Vulnerabilities docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; alert1" / input type="hidden" name="aacfunc" value="O...

docuFORM Mercury WebApp 6.16a / 5.20 Cross Site Scripting

docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; alert1" / input type="hidden" name="aacfunc" value="...

docuFORM Mercury WebApp 6.16a/5.20 Multiple Cross-Site Scripting Vulnerabilities

Summary Unlimited options for production printing and customer solutions. Description The Mercury Web Application suffers from multiple XSS vulnerabilities when parsing user input thru the GET parameter 'thisurl' and the POST parameter 'aasfunc' in fstate.php, flist.php, fjob.php and fheader.php...

docuFORM Mercury WebApp 6.16a/5.20 - Multiple Cross-Site Scripting Vulnerabilities

docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; alert1" / input type="hidden" name="aasfuncargs%5B%5D" value="0"...