PT-2025-46995

Name of the Vulnerable Software and Affected Versions SVX Portal version 2.7A Description A SQL injection flaw exists in SVX Portal version 2.7A. This issue is triggered by a specially crafted POST request sent to the /admin/update setings.php endpoint. Successful exploitation could allow an...

CVE-2025-61532

Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...

PT-2025-41392

Name of the Vulnerable Software and Affected Versions SVX Portal version 2.7A Description A Cross Site Scripting issue exists in SVX Portal version 2.7A that allows for the execution of arbitrary code. The issue is located in the last heard page.php component and involves the TG parameter...