PT-2024-27028

Name of the Vulnerable Software and Affected Versions SoftwareX versions affected versions not specified Description The issue is due to missing input sanitization, allowing an attacker to perform cross-site-scripting attacks and run arbitrary JavaScript in the browser of other users. The login...

CVE-2024-36494: Improper Neutralization of Input During Web Page Generation

Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The login page at /cgi/slogin.cgi suffers from XSS due to improper input filtering of the -tsetup+-uuser parameter, which can only be exploited if th...