CVE-2024-50339: Improper Neutralization of Input During Web Page Generation

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue...

PT-2021-11084

Name of the Vulnerable Software and Affected Versions: qcubed versions 3.1.1 and earlier Description: A reflected cross-site scripting XSS issue in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. Recommendations: For versions 3.1.1...