EUVD-2019-6171

Malware in sbrugna...

CVE-2019-15095

DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter...

Cross site scripting

DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter...

Sql injection

Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow 1 remote attackers to execute arbitrary SQL commands via the SurveyID parameter to survey/ReviewReadOnlySurvey.aspx or 2 remote authenticated users to execute arbitrary SQL commands via the SurveyID...