6 matches found
PT-2026-34333
An insecure direct object reference IDOR vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registered users through various vulnerable authenticated resources in the application. The vulnerable endpoints result from:...
CVE-2025-21092
GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others...
CVE-2019-7634
CVE-2019-7634 affects the SUAP V2 web application, where a cross-site scripting (XSS) flaw occurs during the update of user information. Connected sources indicate the root cause as insufficient validation of client data, enabling injection of script in user-update flows. The NVD metrics show a n...
CVE-2019-7634: Improper Neutralization of Input During Web Page Generation
SUAP V2 allows XSS during the update of user information...
PT-2020-11249
Name of the Vulnerable Software and Affected Versions SUAP V2 affected versions not specified Description The issue allows for XSS during the update of user information. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
