Vulnerabilities

TI-2018-08806 CVE-2018-12273 · GHSA-qrmc-rqvr-r2x9

The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.

LOW 29

The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2018-06-13 No fix listed CWE-79

TI-2018-08805 CVE-2018-12272 · GHSA-jprm-3hp2-88j9

LOW 29

xowl/request.php in Ximdex 4.0 has XSS via the content parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2018-06-13 No fix listed CWE-79

TI-2018-08637 CVE-2018-12047 · GHSA-qr5w-gmhq-ch9c

LOW 29

xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2018-06-08 No fix listed CWE-79

TI-2018-08396 CVE-2018-11735 · GHSA-pq4f-227x-954r

LOW 29

index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0081 Published 2018-06-05 No fix listed CWE-79