CVE-2018-12272

xowl/request.php in Ximdex 4.0 has XSS via the content parameter...

CVE-2018-12273

The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter...

EUVD-2018-3754

Malware in sbrugna...

EUVD-2018-4030

Malware in sbrugna...

EUVD-2018-4248

Malware in sbrugna...

EUVD-2018-4249

Malware in sbrugna...

CVE-2018-11735

index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter...

Ximdex cross-site scripting vulnerability (CNVD-2018-14423)

Ximdex is a content and data management system. The system includes features such as an intelligent search engine, information aggregation, image and text recognition. A cross-site scripting vulnerability exists in the xowl/request.php file in Ximdex version 4.0. A remote attacker can exploit thi...

Ximdex cross-site scripting vulnerability (CNVD-2018-14422)

Ximdex is a content and data management system. The system includes features such as an intelligent search engine, information aggregation, image and text recognition, etc. The DMS component is one of the data management components. A cross-site scripting vulnerability exists in the /edit URI of...

Design/Logic Flaw

xowl/request.php in Ximdex 4.0 has XSS via the content parameter...

CVE-2018-12272

xowl/request.php in Ximdex 4.0 has XSS via the content parameter...

Cross site scripting

The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter...

CVE-2018-12272

xowl/request.php in Ximdex 4.0 has XSS via the content parameter...

CVE-2018-12273

The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter...

CVE-2018-12272

xowl/request.php in Ximdex 4.0 has XSS via the content parameter...

CVE-2018-12273

The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter...

CVE-2018-12273

The CVE-2018-12273 entry affects Ximdex 4.0, specifically the DMS component. The vulnerability is in the /edit URI and allows cross-site scripting via the Ciudad or Nombre parameter. The issue is documented across multiple feeds (NVD, CNVD, OSV, Red Hat, etc.). The CVSS data indicate a network-ba...

CVE-2018-12272

Ximdex 4.0 is affected by a cross-site scripting (XSS) vulnerability in xowl/request.php via the content parameter. The issue is described consistently across multiple sources as an XSS in Ximdex 4.0, without public details on exploit specifics or patches within the provided documents. No remedia...

PT-2018-11093

Name of the Vulnerable Software and Affected Versions Ximdex version 4.0 Description The issue is related to a security problem where an attacker can inject malicious code. The problem occurs due to improper validation of user input in the content parameter of the 'xowl/request.php' file...

PT-2018-11094

Name of the Vulnerable Software and Affected Versions Ximdex version 4.0 Description The issue concerns a security problem where the /edit URI in the DMS component is vulnerable to XSS attacks. This can be exploited via the Ciudad or Nombre parameter. Recommendations For Ximdex version 4.0,...