EUVD-2021-34107

Malicious code in bioql PyPI...

CVE-2021-4265

A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e45290cb58ca. It is recommended to appl...

CVE-2021-4265

A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e45290cb58ca. It is recommended to appl...

CVE-2021-4265

A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e45290cb58ca. It is recommended to appl...

Cross site scripting

A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e45290cb58ca. It is recommended to appl...

CVE-2021-4265

CVE-2021-4265 concerns siwapp-ror with a cross-site scripting vulnerability arising from manipulation of unknown processing. The issue is reported as remote in nature and affects an unspecified subset of the product; no vendor/product versions are detailed in the provided documents. A patch is id...

Siwapp 跨站脚本漏洞

Siwapp is an online invoice management system from Siwapp open source. A security vulnerability exists in Siwapp siwapp-ror, which stems from unknown processing, manipulation leading to cross-site scripting...

CVE-2021-4265 siwapp-ror cross site scripting

A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e45290cb58ca. It is recommended to appl...

CVE-2021-4265 siwapp-ror cross site scripting

A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e45290cb58ca. It is recommended to appl...

PT-2022-11653 · Unknown · Siwapp-Ror

Name of the Vulnerable Software and Affected Versions: siwapp-ror affected versions not specified Description: A problem was found in the software, affecting some unknown processing, which can lead to cross site scripting when manipulated. The attack can be initiated remotely. Recommendations: To...

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in siwapp/siwapp

Description Secure flag is not implemented on the application Proof of Concept https://drive.google.com/file/d/1IOglL2LBh8CnvJUI0tRJw2wCJ8ugnws/view Impact The secure flag is an option that can be set by the application server when sending a new cookie to the user within an HTTP Response. The...

Cross-site Scripting (XSS) - Stored in siwapp/siwapp

Description Stored Cross-Site Scripting XSS vulnerability due to the lack of content validation and output encoding. This vulnerability can be exploited by uploading a crafted payload inside a document. Then, the vulnerability can be triggered when the user previews the document´s content. Proof ...