5 matches found
CVE-2025-63419: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in CrushFTP 11.3.648. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitations leading to HTML Injection...
EUVD-2020-14551
Malware in sbrugna...
CVE-2020-21783
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...
PT-2021-10661
Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.4 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is found in the email function, specifically in the emailbodycontent parameter. XSS is a type of attack where an attacker can...
CVE-2020-21783: Improper Neutralization of Input During Web Page Generation
In IBOS 4.5.4 the email function has a cross site scripting XSS vulnerability in emailbodycontent parameter...