7 matches found
The vulnerability of the SMSS component in Qualcomm’s embedded software allows attackers to disclose protected information.
The vulnerability of the SMSS component in embedded Qualcomm software systems is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to disclose protected information...
CVE-2020-28141
The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...
Design/Logic Flaw
The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...
CVE-2020-28141
The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...
CVE-2020-28141
CVE-2020-28141 affects Online Discussion Forum 1.0. The vulnerability is a reflected/stored XSS in the message body: an authenticated attacker can send messages containing JavaScript to other users, which executes when those users view the messages page. Sources in the connected documents confirm...
PT-2021-11448
Name of the Vulnerable Software and Affected Versions: Online Discussion Forum version 1.0 Description: The messaging subsystem is susceptible to a cross-site scripting XSS issue in the message body, allowing an authenticated user to send messages containing javascript code that executes when the...
CVE-2020-28141: Improper Neutralization of Input During Web Page Generation
The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page...