CVE-2021-44217

CVE-2021-44217 제안된 설명 Ericsson CodeChecker 6.18.0 이하 버전에서, reports viewer의 comments 구성 요소에 있는 저장형 교차 사이트 스크립팅XSS 취약점으로 인해 원격 공격자가 /CodeCheckerService API의 POST JSON 데이터를 통해 임의의 웹 스크립트 또는 HTML을 주입할 수 있습니다. 추가 정보 CodeChecker 웹 서버는 서로 다른 권한을 가진 사용자를 격리하는 권한 시스템을 갖추고 있습니다. 또한 각 사용자의 쿠키를...

PYSEC-2026-625 Cross-site Scripting in Ericsson CodeChecker

In Ericsson CodeChecker prior to 6.18.2, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

CVE-2026-8245

Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection. Concrete\Core\Legacy\Pagination builds pagination links by raw-interpolating its $URL field into href="" . Any authenticated admin or report viewer with access to...

EUVD-2022-0591

Malicious code in bioql PyPI...

CVE-2025-43952

A cross-site scripting reflected XSS vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 440. It allows an attacker to inject malicious scripts via the IWSessionID parameter...

CVE-2025-43952

A reflected cross-site scripting (XSS) vulnerability exists in Mettler Toledo FreeWeight.Net Web Reports Viewer version 8.4.0 (440) . The flaw originates from the improper neutralization of input via the IW_SessionID_ parameter, which allows an attacker to inject malicious scripts into the victim...

CVE-2025-43952

A cross-site scripting reflected XSS vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 440. It allows an attacker to inject malicious scripts via the IWSessionID parameter...

PT-2025-17584 · Mettler Toledo · Mettler Toledo Freeweight.Net Web Reports Viewer

Name of the Vulnerable Software and Affected Versions: Mettler Toledo FreeWeight.Net Web Reports Viewer version 8.4.0 440 Description: A cross-site scripting reflected XSS issue was found, allowing an attacker to inject malicious scripts via the IW SessionID parameter. This enables the execution ...

CVE-2025-43952: Improper Neutralization of Input During Web Page Generation

A cross-site scripting reflected XSS vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 440. It allows an attacker to inject malicious scripts via the IWSessionID parameter...

PYSEC-2022-43181

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

CVE-2021-44217

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

Cross site scripting

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

CVE-2021-44217

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

CVE-2021-44217: Improper Neutralization of Input During Web Page Generation

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...

PT-2022-12020

Name of the Vulnerable Software and Affected Versions Ericsson CodeChecker versions prior to 6.18.2 Description A Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of...

Crystal Reports Viewer 12.0.0.549 - Activex Exploit (PrintControl.dll) 0day

No description provided by source. !-- Crystal Reports Viewer 12.0.0.549 Activex Exploit PrintControl.dll 0-day By = DrIDE File = C:\Program Files\BusinessObjects\Common\4.0\crystalreportviewers12\ActiveXControls\PrintControl.dll method = ServerResourceVersion progid =...

Crystal Reports Viewer 12.0.0.549 Activex Exploit (PrintControl.dll)

Exploit for windows platform in category remote exploits ==================================================================== Crystal Reports Viewer 12.0.0.549 Activex Exploit PrintControl.dll ==================================================================== //payload is windows/exec...

Crystal Reports Viewer 12.0.0.549 - PrintControl.dll ActiveX

Crystal Reports Viewer 12.0.0.549 - PrintControl.dll ActiveX //payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...

Crystal Reports Viewer 12.0.0.549 - 'PrintControl.dll' ActiveX

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Crystal Reports Viewer 12.0.0.549 Active-X Exploit

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...