Design/Logic Flaw

Ivanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frmsplitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frmsplitcollapse.aspx, /LDMS/alertlog.aspx, /LDMS/ServerList.aspx, /LDMS/frmcoremainfrm.aspx, /LDMS/frmfindfrm.aspx, /LDMS/frmtaskfrm.aspx, and /LDMS/querybrowsecomp.aspx...

aspmforum.txt

vendor site:http://www.kervancilar.com/ product:Aspmforum bug:injection sql get & post risk:high injection sql get : /forum.asp?baslik='sql /forum2.asp?baslik=2&soruid='sql /kullanicilistesi.asp?ak=&at=&harf='sql /kullanicilistesi.asp?at=baslayan&ak='sql once logged :...