CVE-2020-9461

CVE-2020-9461 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ 保存型XSS - Oempro Octech Oempro 4.7から4.11では、認証済みユーザーによる保存型XSSが可能です。Media.CreateFolderコマンドのFolderNameパラメーターに脆弱性があります。 コマンド: Media.CreateFold...

EUVD-2020-30280

Malware in sbrugna...

Command injection

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable...

CVE-2020-9461

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable...

CVE-2020-9461

CVE-2020-9461 affects Octech Oempro 4.7–4.11. The vulnerability is a stored XSS that is exploitable by an authenticated user via the FolderName parameter of the Media.CreateFolder command. The issue is documented across multiple sources (NVD entry for CVE-2020-9461, Red Hat advisory, CNVD entries...

CVE-2020-9461: Improper Neutralization of Input During Web Page Generation

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable...