EUVD-2020-12860

Malware in sbrugna...

CVE-2020-20070

Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file...

CVE-2020-20070

Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file...

CVE-2020-20070

CVE-2020-20070 is a Cross-Site Scripting vulnerability in wkeyuan DWSurvey 1.0 that allows remote attackers to execute arbitrary code via the qultemld parameter in the qu-multi-fillblank!answers.action endpoint. NVD/CM sources assign CVSS v3.1 base score 6.1 (MEDIUM) with NETWORK attack vector, L...

CVE-2020-20070: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file...

PT-2023-11545 · Wkeyuan · Dwsurvey

Name of the Vulnerable Software and Affected Versions: wkeyuan DWSurvey version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the qultemld parameter of the "qu-multi-fillblank!answers.action" file. Recommendations: For wkeyuan DWSurvey versio...