712 matches found
CVE-2019-20518
CVE-2019-20518 affects ERPNext 11.1.47 and is described as a reflected XSS vulnerability triggered via PATH_INFO to the project/ URI. Connected sources (RH, NVD, CNVD, osv, CNVD, CVE lists) consistently report the same vector, with no evidence of exploitation details in the provided documents. Th...
CVE-2019-20517
CVE-2019-20517 affects ERPNext 11.1.47 and is a reflected XSS vulnerability reachable via PATH_INFO to the /contact/ URI. The root cause noted in CNVD-2020-19000 is lack of proper validation of client-side data by the web application, allowing an attacker to execute client-side code. Public refer...
CVE-2019-20517
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the contact/ URI...
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
CVE-2019-20516
ERPNext 11.1.47 is affected by a reflected XSS vulnerability via PATH_INFO to the blog/ URI. The connected records confirm the vulnerable condition but do not provide exploitation details, broader affected versions, or a vendor patch/remediation in the supplied documents.
CVE-2019-20515
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20515
ERPNext 11.1.47 is affected by a reflected XSS via the PATH_INFO to the addresses/ URI. The vulnerability is documented across multiple connected sources (e.g., NVD, Red Hat advisory, CNVD, OSV, CVE lists) with consistent description. Root cause details beyond “reflected XSS via PATH_INFO” are no...
CVE-2019-20514
CVE-2019-20514 affects ERPNext 11.1.47 with a reflected XSS vulnerability via PATH_INFO to the /address/ URI. The root cause is inadequate validation of PATH_INFO, enabling injection of client-side script. Reported impact ranges across sources (CVSS data vary: up to high severity in some vectors)...
ERPNext Injection Vulnerability
ERPNext is an open source enterprise resource planning solution from ERPNext India. An injection vulnerability exists in ERPNext version 11.1.47, which arises from a lack of proper validation of user input data by a networked system or product during the course of a user's operation to enter...
PT-2020-10495
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the "user/" URI. This can be demonstrated by a crafted e-mail address. Recommendations For ERPNext version 11.1.47, update to a newer version that...
CVE-2019-20516: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
PT-2020-10493
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the contact/ URI. This can potentially lead to malicious script execution on the client-side. Recommendations For ERPNext version 11.1.47, as a tempora...
CVE-2019-20517: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the contact/ URI...
PT-2020-10492
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the "blog/" URI. This means an attacker can inject malicious code into the PATH INFO variable, potentially leading to the execution of unauthorized...
PT-2020-10491
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the "addresses/" URI. This means an attacker can craft a malicious URL that, when visited by a user, can execute arbitrary JavaScript code on the user'...
CVE-2019-20521: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...
CVE-2019-20515: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20518: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the project/ URI...
PT-2020-10497
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the "api/" URI. This means an attacker can craft a malicious URL that, when visited by a user, can execute arbitrary JavaScript code in the context of...