8 matches found
EUVD-2019-2234
Malware in sbrugna...
CVE-2019-10221
A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a...
PT-2020-9059
Name of the Vulnerable Software and Affected Versions pki-core versions 10.x.x Description A Reflected Cross Site Scripting issue was found in the pki-ca module of the pki-core server, caused by missing sanitization of the GET URL parameters. An attacker could exploit this flaw to trick an...
CVE-2019-10221: Improper Neutralization of Input During Web Page Generation
A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a...
Cross site scripting
The SAP Commerce Testweb Extension, versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlled inputs, due to which certain GET URL parameters are reflected in the HTTP responses without escaping/sanitization, leading to Reflected Cross Site Scripting...
CVE-2020-6201: Improper Neutralization of Input During Web Page Generation
The SAP Commerce Testweb Extension, versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently encode user-controlled inputs, due to which certain GET URL parameters are reflected in the HTTP responses without escaping/sanitization, leading to Reflected Cross Site Scripting...
PT-2020-19002
Name of the Vulnerable Software and Affected Versions SAP Commerce Testweb Extension versions 6.6, 6.7, 1808, 1811, 1905 Description The issue arises from insufficient encoding of user-controlled inputs. Certain GET URL parameters are reflected in the HTTP responses without proper escaping or...
CVE-2019-10221
A Reflected Cross Site Scripting vulnerability was found in the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute...