CMS ISWEB Cross-Site Scripting Vulnerability

CMS ISWEB is a content management system CMS. A cross-site scripting vulnerability exists in the index.php file in CMS ISWEB version 3.5.3. A remote attacker can inject arbitrary web scripts or code with the help of the 'ordineRis', 'sezioneRicerca' or 'ogettiRicerca' parameter. parameter...

CVE-2018-15562

CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php...

PT-2018-13087

Name of the Vulnerable Software and Affected Versions CMS ISWEB version 3.5.3 Description The issue allows for XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to the "index.php" endpoint. Recommendations For CMS ISWEB version 3.5.3, consider restricting the use of the ordineRis...

CVE-2018-15562: Improper Neutralization of Input During Web Page Generation

CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php...