5 matches found
PT-2019-19271
Name of the Vulnerable Software and Affected Versions VertrigoServ version 2.17 Description The issue allows for XSS via the "/inc/extensions.php" API endpoint, specifically through the ext parameter. Recommendations For VertrigoServ version 2.17, consider restricting access to the...
VertrigoServ 2.17 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications alert1 3. Solution: The product is discontinued. Update last version -- 0day.today 2019-03-09...
VertrigoServ 2.17 Cross Site Scripting
alert1 3. Solution: The product is discontinued. Update last version --...
PT-2012-5771
Name of the Vulnerable Software and Affected Versions VertrigoServ version 2.25 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the ext parameter in the inc/extensions.php file. Recommendations For VertrigoServ...
CVE-2012-5102: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject arbitrary web script or HTML via the ext parameter...