EUVD-2017-2809

Malware in sbrugna...

CVE-2017-11175

In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login...

Authentication flaw

In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login...

CVE-2017-11175

In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login...

CVE-2017-11175

CVE-2017-11175 affects J2 Innovations FIN Stack 4.0. The vulnerability is a reflected XSS in the authentication webform, exploitable via a crafted query string to /login (or /auth/ariosa/login per related CNVD entry). The root cause is input reflected back to the user without proper sanitization,...

CVE-2017-11175: Improper Neutralization of Input During Web Page Generation

In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login...

PT-2018-5323

Name of the Vulnerable Software and Affected Versions J2 Innovations FIN Stack version 4.0 Description The authentication webform in J2 Innovations FIN Stack is vulnerable to reflected XSS via the query string to the "/login" API endpoint. This issue allows for potential exploitation through...