28 matches found
Cross site scripting
RainbowFish PacsOne Server 6.8.4 allows XSS...
Sql injection
RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page...
CVE-2020-12869
RainbowFish PacsOne Server 6.8.4 allows XSS...
CVE-2020-12869
RainbowFish PacsOne Server 6.8.4 is affected by a Cross-Site Scripting (XSS) vulnerability (CVE-2020-12869). The connected sources confirm the vulnerable product version and the vulnerability class but do not provide concrete details about the root cause, specific vulnerable component, or a confi...
CVE-2020-12715
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control...
CVE-2020-12715
RainbowFish PacsOne Server 6.8.4 is affected by an Incorrect Access Control vulnerability (CVE-2020-12715). The connected sources identify the issue and reference the same product/version, with no further technical details on the root cause, exploit vectors, or a specified fix in the provided doc...
CVE-2020-12870
RainbowFish PacsOne Server 6.8.4 is affected by CVE-2020-12870 due to an SQL injection on the username parameter in the signup page. The issue is documented across multiple sources (NVD, Red Hat entry, CVE lists) with CVSS scores indicating high/critical impact (CVSS v2 base 7.5; CVSS v3.1 base 9...