EUVD-2017-6210

Malware in sbrugna...

EUVD-2017-6211

Malware in sbrugna...

CVE-2017-14713

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

CVE-2017-14714

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

EPESI 1.8.2 Revision 20170830 Cross Site Scripting

Exploit Title: Multiple Stored XSS in EPESI Date: 10/03/2017 Exploit Author: Zeeshan Shaikh Vendor Homepage: http://epe.si/ Software Link: http://epe.si/download/ Version: 1.8.2 rev20170830 CVE : CVE-2017-14712 to CVE-2017-14717 Category: webapps XSS 1 Tasks - Title Steps to recreate: 1...

EPESI 1.8.2 rev20170830 - Cross-Site Scripting

Exploit Title: Multiple Stored XSS in EPESI Date: 10/03/2017 Exploit Author: Zeeshan Shaikh Vendor Homepage: http://epe.si/ Software Link: http://epe.si/download/ Version: 1.8.2 rev20170830 CVE : CVE-2017-14712 to CVE-2017-14717 Category: webapps XSS 1 Tasks - Title Steps to recreate: 1...

EPESI 1.8.2 rev20170830 - Cross-Site Scripting

EPESI 1.8.2 rev20170830 - Cross-Site Scripting Exploit Title: Multiple Stored XSS in EPESI Date: 10/03/2017 Exploit Author: Zeeshan Shaikh Vendor Homepage: http://epe.si/ Software Link: http://epe.si/download/ Version: 1.8.2 rev20170830 CVE : CVE-2017-14712 to CVE-2017-14717 Category: webapps XSS...

Telaxus EPESI Cross-Site Scripting Vulnerability (CNVD-2017-32709)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the 'Phonecalls...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-32708)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in the 'Phonecalls...

CVE-2017-14713

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

CVE-2017-14713

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

CVE-2017-14714

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

CVE-2017-14714

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

CVE-2017-14714

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter...

CVE-2017-14713

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter...

CVE-2017-14713

Affected product: EPESI 1.8.2 rev20170830. Vulnerability: Stored XSS in the Phonecalls Description parameter. Root cause: input is stored and rendered in a way that allows injection of web script/HTML. Impact in CVSS indicates MEDIUM severity (CVSS-3.0 base 5.4) with user interaction required. No...

CVE-2017-14714

EPESI 1.8.2 rev20170830 is vulnerable to a stored cross-site scripting (XSS) flaw in the Phonecalls Subject field. The issue is documented across multiple sources (including CVE-2017-14714 entries and related advisories) as a stored XSS in the Phonecalls Subject parameter. The available connected...