Vulnerabilities

TI-2025-35196 CVE-2025-55888 · GHSA-fm4p-r7q4-8vrw

Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager…

HIGH 71

Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00441 Published 2025-09-22 No fix listed CWE-79

TI-2025-35195 CVE-2025-55887 · GHSA-wj2r-3vfj-5m26

Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service…

MEDIUM 60

Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2025-09-22 No fix listed CWE-79

TI-2025-35193 CVE-2025-55885 · GHSA-8p8x-v6gq-p9xj

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before…

MEDIUM 61

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00366 Published 2025-09-22 No fix listed CWE-89

Vulnerabilities

Filters

Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager…

Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service…

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before…