EUVD-2020-30280

Malware in sbrugna...

Command injection

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable...

CVE-2020-9461

CVE-2020-9461 affects Octech Oempro 4.7–4.11. The vulnerability is a stored XSS that is exploitable by an authenticated user via the FolderName parameter of the Media.CreateFolder command. The issue is documented across multiple sources (NVD entry for CVE-2020-9461, Red Hat advisory, CNVD entries...

CVE-2020-9461

Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable...