TI-2019-14530 CVE-2019-20152 · GHSA-p69h-f2p5-h43h
An XSS issue was discovered in TreasuryXpress 19191105.
Priority LOW 28
An XSS issue was discovered in TreasuryXpress 19191105.
4 records
An XSS issue was discovered in TreasuryXpress 19191105.
An XSS issue was discovered in TreasuryXpress 19191105.
In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them.
B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft.