PT-2026-42510

Name of the Vulnerable Software and Affected Versions Open ISES Tickets versions prior to 3.44.2 Description An issue exists in the 'ajax/fullsit incidents.php' endpoint where the offset GET parameter is concatenated into the LIMIT clause of a SELECT statement without proper sanitization. This...

Cross site scripting

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Incidents.php id parameter...

CVE-2020-15032

CVE-2020-15032 affects NeDi 1.9C with a cross-site scripting (XSS) vulnerability: an attacker can execute arbitrary JavaScript via the Monitoring-Incidents.php id parameter. The connected documents corroborate the XSS issue across multiple feeds, but do not provide a patch or effective remediatio...

CVE-2020-15032

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Incidents.php id parameter...

CVE-2020-15032: Improper Neutralization of Input During Web Page Generation

NeDi 1.9C is vulnerable to cross-site scripting XSS attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Incidents.php id parameter...

PT-2020-14133

Name of the Vulnerable Software and Affected Versions NeDi version 1.9C Description The issue allows an attacker to execute arbitrary JavaScript code via the "Monitoring-Incidents.php" API endpoint, specifically through the id parameter. This enables a cross-site scripting XSS attack...