7789 matches found
PT-2026-39613
docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php...
PT-2026-39614
docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...
PT-2026-39609
A reflected cross-site scripted XSS vulnerability in the acc-menu pricess.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...
CVE-2025-65417
docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application...
CVE-2025-65415
The docuFORM Managed Print Service Client (version 11.11c ) is vulnerable to a session fixation attack. This vulnerability exists on the application's login page and can lead to an authorization issue, potentially allowing an attacker to hijack a user session. Exploitation details or specific mit...
CVE-2025-65418
The docuFORM Managed Print Service Client version 11.11c is vulnerable to a directory traversal flaw. This vulnerability allows an attacker to read arbitrary files by providing a crafted URL . While the vulnerability has been observed in the wild (sighting reported in May 2026), no specific explo...
CVE-2025-65417
The docuFORM Managed Print Service Client (version 11.11c ) is vulnerable to a reflected cross-site scripting (XSS) attack. The flaw originates from the login page of the application, where improper neutralization of input during web page generation allows an attacker to reflect malicious scripts...
CVE-2025-61312: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripted XSS vulnerability in the acc-menupricess.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...
CVE-2025-61307: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripted XSS vulnerability in the acc-menupapers.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...
CVE-2025-65418: Improper Limitation of a Pathname to a Restricted Directory
docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url...
CVE-2025-61311: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripted XSS vulnerability in the dfm-menualerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...
CVE-2025-61306: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripted XSS vulnerability in the dfm-menucoveragealerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable valu...
PT-2026-39615
Name of the Vulnerable Software and Affected Versions docuFORM Managed Print Service Client version 11.11c Description A directory traversal flaw allows attackers to read arbitrary files by using a crafted URL. Recommendations At the moment, there is no information about a newer version that...
PT-2026-39612
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...
CVE-2025-65418
docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url...
CVE-2025-65415
docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application...
CVE-2025-65416
The docuFORM Managed Print Service Client (specifically version 11.11c ) contains a code vulnerability that allows for arbitrary file upload via the pmupdate.php file. This vulnerability is present in the server-side system developed by the German company docuFORM , which is used for enterprise d...
CVE-2025-61310: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripted XSS vulnerability in the acc-menubillings.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...
CVE-2025-61305: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripted XSS vulnerability in the dfm-menufirmware.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...