CVE-2019-19855

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. admin/listuser allows stored XSS via the authtype parameter...

Design/Logic Flaw

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. admin/listuser allows stored XSS via the authtype parameter...

CVE-2019-19855

CVE-2019-19855 affects Serpico (SimplE RePort wrIting and CollaboratiOn tool) v1.3.0. The vulnerability is a stored XSS in admin/list_user exploitable via the auth_type parameter. This is due to improper input handling in that endpoint, enabling script execution in a victim’s browser when the aff...

CVE-2019-19855

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. admin/listuser allows stored XSS via the authtype parameter...

CVE-2019-19856

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The User Type on the admin/listuser page allows stored XSS via the type parameter...

CVE-2019-19856: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The User Type on the admin/listuser page allows stored XSS via the type parameter...

CVE-2019-19855: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. admin/listuser allows stored XSS via the authtype parameter...

CVE-2004-0621: Undefined Security Weakness

admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a listuser operation with the ulevel parameter set to 1 administrator level, which lists all users and their passwords...