PT-2022-25727 · Sap · Sap Commerce

Name of the Vulnerable Software and Affected Versions: SAP Commerce versions 1905 through 2205 Description: An attacker can change the content of the SAP Commerce login page through a manipulated URL, allowing them to inject code that redirects submissions from the affected login form to their ow...

Xpressions Interactive - Multiple SQL Injections

Xpressions Interactive - Multiple SQL Injections source: https://www.securityfocus.com/bid/7804/info Several software products maintained by Xpressions Interactive are prone to SQL injection attacks. The vulnerability exists in the login.asp page. Specifically, user-supplied input is not...

RSA ClearTrust 4.64.7 - Login Page Cross-Site Scripting

RSA ClearTrust 4.64.7 - Login Page Cross-Site Scripting source: https://www.securityfocus.com/bid/7108/info A cross-site scripting vulnerability has been discovered in ClearTrust. Specifically, the login page for the management application is not properly sanitized of some user-supplied values. A...