EUVD-2020-5727

Malware in sbrugna...

EUVD-2020-3912

Malware in sbrugna...

EUVD-2020-3911

Malware in sbrugna...

EUVD-2019-7080

Malware in sbrugna...

CVE-2020-11561

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...

NCH Express Invoice 7.25 Cleartext Password

Exploit Title: NCH Express Invoice - Clear Text Password Storage and Account Takeover Google Dork:: intitle:ExpressInvoice - Login Date: 07/Apr/2020 Exploit Author: Tejas Nitin Pingulkar https://cvewalkthrough.com/ Vendor Homepage: https://www.nchsoftware.com/ Software Link:...

NCH Express Invoice - Clear Text Password Storage and Account Takeover

Exploit Title: NCH Express Invoice - Clear Text Password Storage and Account Takeover Google Dork:: intitle:ExpressInvoice - Login Date: 07/Apr/2020 Exploit Author: Tejas Nitin Pingulkar https://cvewalkthrough.com/ Vendor Homepage: https://www.nchsoftware.com/ Software Link:...

PT-2020-13562

Name of the Vulnerable Software and Affected Versions NCH Express Invoice versions 8.06 through 8.24 Description The issue concerns a Reflected XSS vulnerability in the Quotes List module. Recommendations For versions 8.06 through 8.24, update to a version that contains a fix for this issue...

CVE-2020-13476

NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module...

Cross site scripting

NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module...

CVE-2020-13476

NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module...

CVE-2020-13476

The CVE-2020-13476 entry describes a Reflected XSS in the Quotes List module of NCH Express Invoice versions 8.06–8.24. Affected software is the NCH Express Invoice product (Invoice software). According to the NVD entry, the vulnerability is network-accessible with MEDIUM overall risk (CVSS v3.1 ...

PT-2020-13563

Name of the Vulnerable Software and Affected Versions NCH Express Invoice versions 8.06 through 8.24 Description The issue concerns a Reflected XSS vulnerability in the Quotes List module. Recommendations For versions 8.06 through 8.24, update to a version that fixes the Reflected XSS issue in th...

CVE-2020-13476: Improper Neutralization of Input During Web Page Generation

NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module...

CVE-2020-11560

NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file...

Design/Logic Flaw

NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file...

CVE-2020-11561

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...

Code injection

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...

CVE-2020-11561

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...

CVE-2020-11561

NCH Express Invoice 7.25 is affected by CVE-2020-11561. The vulnerability allows an authenticated, low-privilege user to craft a URL that gains access to higher-privileged functionalities, such as the Add New Item screen. Multiple connected sources (NVD, Red Hat, CNVD, CNVD-derived listings) corr...