17 matches found
CVE-2025-69752
An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...
CVE-2025-69752
An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...
Ideagen Q-Pulse 安全漏洞
Ideagen Q-Pulse is a quality compliance management software developed by the British company Ideagen. Version 7.1.0.32 of Ideagen Q-Pulse contains a security vulnerability. This vulnerability stems from a flaw in the My Details page’s functionality, which may allow authenticated users to access...
CVE-2025-69752
An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...
CVE-2025-69752
An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...
CVE-2025-69752
A security vulnerability in Ideagen Q-Pulse 7.1.0.32 affects the "My Details" user profile functionality . This flaw allows an authenticated user to access and view the profile information of other users by manipulating the objectKey HTTP parameter within the My Details page URL. No specific reme...
CVE-2025-69752
An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...
PT-2026-7858
Name of the Vulnerable Software and Affected Versions Ideagen Q-Pulse version 7.1.0.32 Description An authenticated user can view other users' profile information in the "My Details" functionality by altering the objectKey HTTP parameter within the URL of the My Details page. This allows...
CVE-2025-69752: Authorization Bypass Through User-Controlled Key
An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL...
EUVD-2014-1316
Malware in sbrugna...
CVE-2014-1238
Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...
Cross site scripting
Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...
CVE-2014-1238
Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...
CVE-2014-1238
This CVE (CVE-2014-1238) is a Cross-Site Scripting (XSS) in Gael/Q-Pulse 0.6 and earlier, affecting the UI path ui/common/managedlistdialog.aspx. The vulnerability arises from unvalidated input being inserted into a JavaScript variable named $RootTree, exploitable via a crafted URL (e.g., LookupL...
CVE-2014-1238: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ui/common/managedlistdialog.aspx in Gael Q-Pulse 0.6 and earlier...
[CVE-2014-1238] Cross Site Scripting(XSS) in q-pulse application
Cross-Site Scripting XSS in Q-Pulse application Advisory ID: hag201475 Product: q-pulse risk management software Vendor: q-pulse Vulnerable Versions: 0.6 and probably prior Tested Version: 0.6 Advisory Publication: Januray 14, 2013 Vendor Notification: July 31, 2013 Public Disclosure: December 31...
Q-Pulse 0.6 Cross Site Scripting
Cross-Site Scripting XSS in Q-Pulse application Advisory ID: hag201475 Product: q-pulse risk management software Vendor: q-pulse Vulnerable Versions: 0.6 and probably prior Tested Version: 0.6 Advisory Publication: Januray 14, 2013 Vendor Notification: July 31, 2013 Public Disclosure: December 31...