EUVD-2007-5920

Malware in sbrugna...

EUVD-2006-4155

Malware in sbrugna...

EUVD-2016-5795

Malware in sbrugna...

EUVD-2019-15586

Malware in sbrugna...

CVE-2019-6018

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier NetCommons3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-6018

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier NetCommons3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-6018

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier NetCommons3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier NetCommons3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-6018

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier NetCommons3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2019-6018

NetCommons3.x (NetCommons 3.2.2 and earlier) is affected by a cross-site scripting (XSS) vulnerability (CWE-79). The issue arises from insufficient validation of client data in the web application, allowing an attacker to inject arbitrary script/HTML into users’ browsers. Affected versions includ...

CVE-2019-6018: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier NetCommons3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-17943

Name of the Vulnerable Software and Affected Versions NetCommons versions 3.2.2 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 3.2.2 and earlier, update to a version later th...

NetCommons Cross-Site Scripting Vulnerability

NetCommons is an information sharing platform system. A cross-site scripting vulnerability exists in NetCommons 3.2.2 and prior versions, which stems from a lack of proper validation of client data by the WEB application and can be exploited by an attacker to execute client-side code...

JVN#74530672: NetCommons3 vulnerable to cross-site scripting

NetCommons3 provided by The NetCommons Project contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer. Products...

CVE-2016-4813

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat aka CLERK users to gain privileges by creating a SYSTEMADMIN account...

CVE-2016-4813

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat aka CLERK users to gain privileges by creating a SYSTEMADMIN account...

Code injection

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat aka CLERK users to gain privileges by creating a SYSTEMADMIN account...

CVE-2016-4813

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat aka CLERK users to gain privileges by creating a SYSTEMADMIN account...

CVE-2016-4813

NetCommons 2.4.2.1 and earlier are affected by a privilege-escalation flaw where a remote authenticated secretariat user (CLERK) can create a SYSTEM_ADMIN account, granting full admin rights. The root cause is elevation of privileges within the NetCommons privilege model, enabling CLERK to gain a...

CVE-2016-4813: Improper Access Control

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat aka CLERK users to gain privileges by creating a SYSTEMADMIN account...