895 matches found
CVE-2019-20519
Affected software: ERPNext 11.1.47. Vulnerability: reflected XSS via PATH_INFO to the user/ URI, demonstrated by a crafted e-mail address. Root cause (as stated): improper handling of PATH_INFO leading to script execution on the client side. Impact: client-side code execution risk; severity metri...
CVE-2019-20519
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the user/ URI, as demonstrated by a crafted e-mail address...
CVE-2019-20518
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the project/ URI...
CVE-2019-20518
CVE-2019-20518 affects ERPNext 11.1.47 and is described as a reflected XSS vulnerability triggered via PATH_INFO to the project/ URI. Connected sources (RH, NVD, CNVD, osv, CNVD, CVE lists) consistently report the same vector, with no evidence of exploitation details in the provided documents. Th...
CVE-2019-20517
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the contact/ URI...
CVE-2019-20517
CVE-2019-20517 affects ERPNext 11.1.47 and is a reflected XSS vulnerability reachable via PATH_INFO to the /contact/ URI. The root cause noted in CNVD-2020-19000 is lack of proper validation of client-side data by the web application, allowing an attacker to execute client-side code. Public refer...
CVE-2019-20516
ERPNext 11.1.47 is affected by a reflected XSS vulnerability via PATH_INFO to the blog/ URI. The connected records confirm the vulnerable condition but do not provide exploitation details, broader affected versions, or a vendor patch/remediation in the supplied documents.
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
CVE-2019-20515
ERPNext 11.1.47 is affected by a reflected XSS via the PATH_INFO to the addresses/ URI. The vulnerability is documented across multiple connected sources (e.g., NVD, Red Hat advisory, CNVD, OSV, CVE lists) with consistent description. Root cause details beyond “reflected XSS via PATH_INFO” are no...
CVE-2019-20515
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20514
CVE-2019-20514 affects ERPNext 11.1.47 with a reflected XSS vulnerability via PATH_INFO to the /address/ URI. The root cause is inadequate validation of PATH_INFO, enabling injection of client-side script. Reported impact ranges across sources (CVSS data vary: up to high severity in some vectors)...
CVE-2019-20516: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
PT-2020-10490
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows reflected XSS via the PATH INFO to the address/ URI. This can be exploited by manipulating the PATH INFO variable in the request. Recommendations For ERPNext version 11.1.47, consider...
PT-2020-10493
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the contact/ URI. This can potentially lead to malicious script execution on the client-side. Recommendations For ERPNext version 11.1.47, as a tempora...
PT-2020-10492
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the "blog/" URI. This means an attacker can inject malicious code into the PATH INFO variable, potentially leading to the execution of unauthorized...
CVE-2019-20515: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20521: Improper Neutralization of Input During Web Page Generation
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...
PT-2020-10494
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the "project/" URI. This means an attacker can inject malicious code into the PATH INFO variable, potentially leading to the execution of unauthorized...
PT-2020-10497
Name of the Vulnerable Software and Affected Versions ERPNext version 11.1.47 Description The issue allows for reflected XSS via the PATH INFO to the "api/" URI. This means an attacker can craft a malicious URL that, when visited by a user, can execute arbitrary JavaScript code in the context of...