CVE-2020-35396

EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting XSS via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website...

CVE-2020-35395

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

CVE-2020-35395

CVE-2020-35395 describes a stored XSS vulnerability in the EGavilan Media Expense Management System 1.0, affecting the Add Expense Component. The underlying issue is that the attacker-supplied string in the description field can inject JavaScript, leading to persistent client-side code execution....

CVE-2020-35395: Improper Neutralization of Input During Web Page Generation

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field...

EGavilan Barcodes generator 跨站脚本漏洞

Egavilan Media Barcodes generator is a Php-based barcode generator for product names from Egavilan Media. EGavilan Barcodes generator 1.0 suffers from a cross-site scripting vulnerability that originates from cross-site scripting XSS via index.php. An attacker can exploit this vulnerability to...

Egavilan Media Expense Management System 跨站脚本漏洞

Egavilan Media Expense Management System is a Php-based management system for logging overhead from Egavilan Media, USA. A cross-site scripting vulnerability exists in the EGavilan Media Expense Management System version 1.0, which can be exploited to permanently store malicious JavaScript code i...

CVE-2020-35396: Improper Neutralization of Input During Web Page Generation

EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting XSS via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website...

PT-2020-17323

Name of the Vulnerable Software and Affected Versions EGavilan Media Expense Management System version 1.0 Description The issue allows an attacker to permanently store malicious JavaScript code via the description field in the Add Expense Component. This enables the attacker to execute the...

PT-2020-17324

Name of the Vulnerable Software and Affected Versions EGavilan Barcodes generator version 1.0 Description The issue allows an attacker to inject a Cross Site Scripting XSS payload in the web application, which is executed every time a user visits the website. This occurs via the index.php file...