CVE-2018-14931: URL Redirection to Untrusted Site

An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. An open redirect exists via a /IntellectMain.jsp?IntellectSystem= URI...

CVE-2018-14875: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter...

CVE-2018-14930: Cross-Site Request Forgery (CSRF)

An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. CSRF can occur via a /CollatWebApp/gcmsRefInsert?name=SUPP URI...

CVE-2018-14874: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Armor module in Polaris FT Intellect Core Banking 9.7.1. Input passed through the code parameter in three pages as collaterals/colexe3t.jsp and /references/refsuppu.jsp and /references/refbranu.jsp is mishandled before being used in SQL queries, allowing SQL injecti...

Intellect Design Arena Intellect Core banking software cross-site scripting vulnerability

Intellect Design Arena Intellect Core banking software is a banking management system from Intellect Design Arena India. A cross-site scripting vulnerability exists in Intellect Design Arena Intellect Core banking software. A remote attacker can exploit this vulnerability to execute arbitrary JS...

CVE-2015-6540

Cross-site scripting XSS vulnerability in Intellect Design Arena Intellect Core banking software...

Cross site scripting

Cross-site scripting XSS vulnerability in Intellect Design Arena Intellect Core banking software...

CVE-2015-6540

Cross-site scripting XSS vulnerability in Intellect Design Arena Intellect Core banking software...

CVE-2015-6540

CVE-2015-6540 describes a Cross-Site Scripting (XSS) vulnerability in Intellect Design Arena Intellect Core banking software (Armar module). The connected 0day/The vulnerability details indicate an arbitrary client-side JavaScript execution capability after login via a crafted link, potentially e...

CVE-2015-6540: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Intellect Design Arena Intellect Core banking software...

PT-2017-7033

Name of the Vulnerable Software and Affected Versions Intellect Design Arena Intellect Core banking software affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an...

Intellect Core Cross Site Scripting Vulnerability

Intellect Core banking software suffers from a cross site scripting vulnerability. Vendor: ==================== Intellect Design Arena Polaris Product: =================== Intellect Core banking software Armar module Vulnerability Type: ========================== Cross site scripting - XSS CVE...

Intellect Core Cross Site Scripting

Credits: Mayank Sahu + Email: [email protected] Vendor: ==================== Intellect Design Arena Polaris Product: =================== Intellect Core banking software Armar module Vulnerability Type: ========================== Cross site scripting - XSS CVE Reference: ==============...

intellectmoney.ru XSS vulnerability

Open Bug Bounty ID: OBB-55534 Description| Value ---|--- Affected Website:| intellectmoney.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...