PT-2021-19410

Name of the Vulnerable Software and Affected Versions SIS SIS-REWE Go versions prior to 7.7 SP17 Description The issue allows for XSS attacks. It affects the 'rewe/prod/web/index.php' endpoint, with vulnerable parameters being config, version, win, db, pwd, and user. Additionally, the...

CVE-2021-31537: Improper Neutralization of Input During Web Page Generation

SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters...