EUVD-2021-14707

Malware in sbrugna...

medianet-group.it Cross Site Scripting vulnerability OBB-3523295

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-27990

Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...

CVE-2021-27990

Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...

CVE-2021-27989

Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...

CVE-2021-27989

Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...

Cross site scripting

Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...

CVE-2021-27989

Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...

CVE-2021-27989

Appspace 6.2.4 is reported vulnerable to stored cross-site scripting (XSS) in multiple parameters of /medianet/sgcontentset.aspx. The CVE entry identifies the affected product and endpoint but does not publish exact root cause details or a formal fix version. A PoC repository is linked in referen...

PT-2021-17703

Name of the Vulnerable Software and Affected Versions: Appspace version 6.2.4 Description: The issue concerns stored cross-site scripting XSS in multiple parameters within the "/medianet/sgcontentset.aspx" API endpoint. This means that an attacker can inject malicious scripts into the application...

Appspace 授权问题漏洞

Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. Appspace version 6.2.4 suffers from an authorization issue vulnerability that stems from being susceptible to authentication mechanism...

CVE-2021-27989: Improper Neutralization of Input During Web Page Generation

Appspace 6.2.4 is vulnerable to stored cross-site scripting XSS in multiple parameters within /medianet/sgcontentset.aspx...

Appspace 跨站脚本漏洞

Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. Appspace version 6.2.4 suffers from a cross-site scripting vulnerability that originates from multiple parameters in medianet...

PT-2021-17704

Name of the Vulnerable Software and Affected Versions: Appspace version 6.2.4 Description: The issue concerns a broken authentication mechanism. This allows pages such as "/medianet/mail.aspx" to be accessed directly, exposing the framework's layouts, menus, and functionalities. Recommendations:...

CVE-2021-27990: Improper Authentication

Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...

medianet-home.de Cross Site Scripting vulnerability OBB-1431655

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...