5941 matches found
CVE-2025-54817
A reflected cross-site scripting xss vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a URL to a malicious website to trigger this vulnerability...
CVE-2025-53516
Cisco Talos discloses a pre-auth, reflected XSS in MedDream PACS Premium 7.3.6.870 via the downloadZip.php script, triggered by a crafted URL parameter (seq). Successful exploitation could lead to arbitrary JavaScript execution in the context of the user’s browser. Affected component: Pacs/downlo...
CVE-2025-53516
A reflected cross-site scripting xss vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-53516
A reflected cross-site scripting xss vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54495
CVE-2025-54495 is a reflected xss vulnerability in MedDream PACS Premium 7.3.6.870, specifically in the emailfailedjob.php flow. Cisco Talos identifies a post-authenticated flaw where the value of the jobid parameter is written into HTML output without sanitization, enabling arbitrary JavaScript ...
CVE-2025-54495
A reflected cross-site scripting xss vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54157
A reflected cross-site scripting xss vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54157
Summary (CVE-2025-54157): Cisco Talos reports a post-authentication, reflected cross-site scripting vulnerability in MedDream PACS Premium 7.3.6.870, specifically in the encapsulatedDoc.php path. A crafted URL can cause arbitrary JavaScript execution, potentially affecting users who can access th...
CVE-2025-54778
A reflected cross-site scripting xss vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54778
A reflected cross-site scripting xss vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54778
Talos discloses a post-authenticated, reflected cross-site scripting vulnerability in MedDream PACS Premium 7.3.6.870’s Pacs/existingUser.php. The attacker can craft a URL that injects JavaScript (via the external parameter) and triggers arbitrary code execution in the context of the user’s brows...
CVE-2025-46270
Talos reports MedDream PACS Premium 7.3.6.870 contains a post-authenticated reflected XSS in Pacs/fetchPriorStudies.php, triggered by a crafted uid URL parameter. The vulnerability can cause arbitrary JavaScript execution in the attacker’s browser when the vulnerable page outputs unsanitized uid ...
CVE-2025-46270
A reflected cross-site scripting xss vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-55071
CVE-2025-55071 corresponds to a pre-authenticated reflected XSS in MedDream PACS Premium 7.3.6.870, specifically in Pacs/modifyAnonymize.php. The vuln is triggered via the name parameter, which is written into HTML output without sanitization, enabling arbitrary JavaScript execution when a crafte...
CVE-2025-55071
A reflected cross-site scripting xss vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-55071
A reflected cross-site scripting xss vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54852
CVE-2025-54852 is a pre-authenticated, reflected cross-site scripting (XSS) vulnerability in MedDream PACS Premium 7.3.6.870, specifically in the modifyAeTitle.php script. A crafted URL with an unsanitized title parameter can cause arbitrary JavaScript execution in the web output. Talos confirms ...
CVE-2025-54814
MedDream PACS Premium 7.3.6.870 contains a post-auth reflected XSS in Pacs/modifyAutopurgeFilter.php via the key URL parameter. A crafted URL can cause arbitrary JavaScript execution in the affected web output. Talos reports the vulnerability as TALOS-2025-2261 (CVE-2025-54814) with CVSSv3.1 6.1 ...
CVE-2025-54814
A reflected cross-site scripting xss vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54861
A reflected cross-site scripting xss vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...