EUVD-2018-10165

Malware in sbrugna...

Axioscloud Sissiweb Registro Elettronico 7.0.0 - Error_desc Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Errordesc' Cross-Site Scripting Exploit Author: Dino Barlattani Vendor Homepage: http://axiositalia.it/ Software Link: http://axiositalia.it/?pageid=1907 Version: 1.7.0/7.0.0...

Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Error_desc' Cross-Site Scripting

Exploit Title: Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Errordesc' Cross-Site Scripting Dork: n/a Date: 2018-10-11 Exploit Author: Dino Barlattani Vendor Homepage: http://axiositalia.it/ Software Link: http://axiositalia.it/?pageid=1907 Version: 1.7.0/7.0.0 Category: Webapps Platform: AS...

Axioscloud Sissiweb Registro Elettronico 7.0.0 Cross Site Scripting

Exploit Title: Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Errordesc' Cross-Site Scripting Dork: n/a Date: 2018-10-11 Exploit Author: Dino Barlattani Vendor Homepage: http://axiositalia.it/ Software Link: http://axiositalia.it/?pageid=1907 Version: 1.7.0/7.0.0 Category: Webapps Platform: AS...

Axioscloud Sissiweb Registro Elettronico 7.0.0 - Error_desc Cross-Site Scripting

Axioscloud Sissiweb Registro Elettronico 7.0.0 - Errordesc Cross-Site Scripting Exploit Title: Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Errordesc' Cross-Site Scripting Dork: n/a Date: 2018-10-11 Exploit Author: Dino Barlattani Vendor Homepage: http://axiositalia.it/ Software Link:...

AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico Cross-Site Scripting Vulnerability

AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico is a cloud-based software, also available as an app, which, in addition to the standardized corporate management, also has specialized functions for the management of the learning process, with the goal of supporting the management of teachers...

CVE-2018-18437

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

CVE-2018-18437

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

Design/Logic Flaw

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

CVE-2018-18437

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

CVE-2018-18437

CVE-2018-18437 affects AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in secret/relogoff.aspx exploitable via the Error_Desc parameter, allowing an attacker to inject arbitrary script when the page is rendered. Documented in mul...

CVE-2018-18437: Improper Neutralization of Input During Web Page Generation

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

PT-2018-14462

Name of the Vulnerable Software and Affected Versions AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico version 1.7.0 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible due to the presence of a flaw in the "secret/relogoff.aspx"...