EUVD-2017-7365

Malware in sbrugna...

EUVD-2019-5475

Malware in sbrugna...

CVE-2019-14228

Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF...

CVE-2017-15949

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

CVE-2019-14228

Xavier PHP Management Panel 3.0 is affected by a Reflected POST-based XSS in the username parameter during new user registration via admin/includes/adminprocess.php. The XSS reflects on the error page when registration fails, and the vulnerability is exacerbated by the absence of CSRF protection ...

PT-2019-13548

Name of the Vulnerable Software and Affected Versions Xavier PHP Management Panel version 3.0 Description The issue concerns a Reflected POST-based XSS that occurs via the username parameter when registering a new user at the "admin/includes/adminprocess.php" endpoint. If an error occurs during...

CVE-2019-14228: Improper Neutralization of Input During Web Page Generation

Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF...

CVE-2017-15949

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

CVE-2017-15949

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

CVE-2017-15949: Improper Neutralization of Special Elements used in an SQL Command

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

PT-2017-14306

Name of the Vulnerable Software and Affected Versions Xavier PHP Management Panel version 2.4 Description The issue allows SQL injection via the usertoedit parameter to "admin/adminuseredit.php" or the log id parameter to "admin/editgroup.php". Recommendations For Xavier PHP Management Panel...