16 matches found
EUVD-2018-9535
Malware in sbrugna...
CVE-2018-17790
Prospecta Master Data Online MDO 2.0 has Stored XSS...
CVE-2018-17789
Prospecta Master Data Online MDO allows CSRF...
CVE-2018-17789
Prospecta Master Data Online MDO allows CSRF...
Cross site request forgery (csrf)
Prospecta Master Data Online MDO allows CSRF...
CVE-2018-17789
Prospecta Master Data Online MDO allows CSRF...
CVE-2018-17789
CVE-2018-17789 affects Prospecta Master Data Online (MDO). Multiple connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability in MDO. CVSS data from NVD indicates a base score of 4.3 (CVSS2.0, MEDIUM) with network attack vector, no confidentiality impact, partial integrity impac...
PT-2019-9520
Name of the Vulnerable Software and Affected Versions Prospecta Master Data Online MDO affected versions not specified Description The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
CVE-2018-17789: Cross-Site Request Forgery (CSRF)
Prospecta Master Data Online MDO allows CSRF...
CVE-2018-17790
Prospecta Master Data Online MDO 2.0 has Stored XSS...
CVE-2018-17790
Prospecta Master Data Online MDO 2.0 has Stored XSS...
Cross site scripting
Prospecta Master Data Online MDO 2.0 has Stored XSS...
CVE-2018-17790
Prospecta Master Data Online MDO 2.0 has Stored XSS...
CVE-2018-17790
CVE-2018-17790 affects Prospecta Master Data Online (MDO) 2.0 with a Stored XSS vulnerability. The root cause cited in CNVD-2019-27252 is lack of proper validation of client-side data in the web application. Other sources reiterate the issue as Stored XSS but do not provide exploitation details o...
CVE-2018-17790: Improper Neutralization of Input During Web Page Generation
Prospecta Master Data Online MDO 2.0 has Stored XSS...
PT-2019-9521 · Prospecta · Prospecta Master Data Online
Name of the Vulnerable Software and Affected Versions: Prospecta Master Data Online MDO version 2.0 Description: The issue is related to Stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...