Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/23 2:16 a.m.•9 views

CVE-2026-115536

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element is the function simpan of the file application/modules/admin/controllers/routingpages.php of the component Admin Routing Page. The manipulation of the argumen...

5.3CVSS0.00273EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/23 1:15 a.m.•8 views

EUVD-2026-108565

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element is the function simpan of the file application/modules/admin/controllers/routingpages.php of the component Admin Routing Page. The manipulation of the argumen...

5.3CVSS3.2AI score0.00273EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/23 1:15 a.m.•11 views

CVE-2026-115536 gedelumbung HospitalManagement Admin Routing routing_pages.php simpan cross site scripting

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element is the function simpan of the file application/modules/admin/controllers/routingpages.php of the component Admin Routing Page. The manipulation of the argumen...

5.3CVSS3.7AI score
SaveExploits0References8
CVE
CVE
•added 2026/10/23 1:15 a.m.•12 views

CVE-2026-115536

A security flaw in gedelumbung HospitalManagement (up to commit c2d45543789a3887067d3915f69d44cfc2cf76a8) allows for cross-site scripting (XSS) . The vulnerability exists in the simpan function within the application/modules/admin/controllers/routing_pages.php file of the Admin Routing Page compo...

5.3CVSS3.2AI score0.00273EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/02 3:31 p.m.•15 views

EUVD-2026-18314

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the domain parameter to /manage/smtpscan/domainrouting/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...

6.4CVSS5.9AI score0.00138EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/02 2:46 p.m.•10 views

CVE-2026-34816

Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the domain parameter to /manage/smtpscan/domainrouting/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...

6.4CVSS5.7AI score0.00138EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/04/02 2:45 p.m.•30 views

CVE-2026-34798

CVE-2026-34798 affects Endian Firewall,

6.4CVSS5.8AI score0.00172EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder