Lucene search
Veracode Vulnerability DatabaseVERACODE:21638HistoryOct 07, 2019 - 2:24 a.m.
Cross-Site Scripting (XSS)
2019-10-0702:24:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
EPSS
0.001
Percentile
36.5%
intelliants/subrion is vulnerable to cross-site scripting (XSS). The vulnerability exists as the values of username, email, and fullname is not sanitized, allowing an attacker to inject arbitrary Javascript into a victim’s browser via the affected parameters.
Related
cve
cve
CVE-2019-17225
2019-10-06 17:15:11
cvelist
cvelist
CVE-2019-17225
2019-10-06 16:46:48
nvd
nvd
CVE-2019-17225
2019-10-06 17:15:11
zdt
zdt
Subrion 4.2.1 - (Email) Persistant Cross-Site Scripting Vulnerability
2019-10-07 00:00:00
exploitpack
exploitpack
Subrion 4.2.1 - Email Persistant Cross-Site Scripting
2019-10-07 00:00:00
packetstorm
packetstorm
Subrion 4.2.1 Cross Site Scripting
2019-10-07 00:00:00
osv
osv
CVE-2019-17225
2019-10-06 17:15:11
prion
prion
Session fixation
2019-10-06 17:15:00
exploitdb
exploitdb
Subrion 4.2.1 - 'Email' Persistant Cross-Site Scripting
2019-10-07 00:00:00