9 matches found
CVE-2020-16270
CVE-2020-16270 Предлагаемое описание : OLIMPOKS версии ниже 3.3.39 допускает XSS-уязвимость ErrorMessage в Auth/Admin. Удалённый злоумышленник может использовать обнаруженную уязвимость для внедрения вредоносной JavaScript-нагрузки в браузеры жертв в контексте уязвимых приложений. Выполняемый код...
The vulnerability of the software for the training and control system “OLIMPOKS: Enterprise” arises from improper external management of file names or paths, allowing a perpetrator to gain unauthorized access to protected information.
The vulnerability of the software for the training and control system “OLIMPOKS: Enterprise” is related to improper external management of file names or file paths. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the software interface for the training and control system “OLIMPOKS” allows a perpetrator to perform cross-site scripting attacks (XSS).
The vulnerability of the software interface for the training and control system “OLIMPOKS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...
CVE-2020-16270
OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s cookies, influence HTML content of...
OLIMPOKS Cross-Site Scripting Vulnerability
OLIMPOKS is a mobile device application for vocational training from olimpoks Russia. The application offers provides the opportunity to conduct training in industrial safety certified areas approved by Rostekhnadzor, labor protection, labor protection, civil defense and emergency situations on...
CVE-2020-16270
OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s cookies, influence HTML content of...
CVE-2020-16270
CVE-2020-16270 affects OLIMPOKS v3.3.39 and involves an Auth/Admin ErrorMessage XSS that enables a remote attacker to inject JavaScript in vulnerable applications. The vulnerability stems from improper handling/validation of the ErrorMessage parameter, allowing script execution in the victim’s br...
CVE-2020-16270
OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s cookies, influence HTML content of...
