EUVD-2023-33373

Malicious code in bioql PyPI...

Cross site scripting

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

CVE-2023-29836

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

CVE-2023-29836

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

CVE-2023-29836

Exelysis EUCS v1.0 has a cross-site scripting vulnerability that can allow a remote attacker to gain privileges via the eucsAdmin login URL path. Related entries CVE-2023-29836 and CVE-2023-29837 describe the same issue. Some sources (PT-2023-22437) provide temporary mitigations (restrict access ...