CVE-2021-31537

SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters...

CVE-2021-31537

The CVE-2021-31537 issue affects SIS Informatik REWE GO prior to version 7.7 SP17, with a reflected XSS in rewe/prod/web/index.php (parameters: config, version, win, db, pwd, user) and rewe/prod/web/rewe_go_check.php (version and other parameters). Nuclei templates confirm the vulnerable paths an...

PT-2021-19410

Name of the Vulnerable Software and Affected Versions SIS SIS-REWE Go versions prior to 7.7 SP17 Description The issue allows for XSS attacks. It affects the 'rewe/prod/web/index.php' endpoint, with vulnerable parameters being config, version, win, db, pwd, and user. Additionally, the...

CVE-2021-31537: Improper Neutralization of Input During Web Page Generation

SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters...