CVE-2023-45471

The QAD Search Server is vulnerable to Stored Cross-Site Scripting XSS in versions up to, and including, 1.0.0.315 due to insufficient checks on indexes. This makes it possible for unauthenticated attackers to create a new index and inject a malicious web script into its name, that will execute...

QAD Search Server Cross-Site Scripting Vulnerability

QAD Search Server is a search server application from QAD Corporation. A security vulnerability exists in QAD Search Server version 1.0.0.315 and earlier, which stems from vulnerability to a stored cross-site scripting XSS attack that allows an unauthenticated attacker to create new indexes and...