Vulnerabilities > Ximdex

DATE CVE VULNERABILITY TITLE RISK
2018-06-13 CVE-2018-12273 Cross-site Scripting vulnerability in Ximdex 4.0
The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.
network
low complexity
ximdex CWE-79
6.1
2018-06-13 CVE-2018-12272 Cross-site Scripting vulnerability in Ximdex 4.0
xowl/request.php in Ximdex 4.0 has XSS via the content parameter.
network
low complexity
ximdex CWE-79
6.1
2018-06-08 CVE-2018-12047 Cross-site Scripting vulnerability in Ximdex 4.0
xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.
network
low complexity
ximdex CWE-79
6.1
2018-06-05 CVE-2018-11735 Cross-site Scripting vulnerability in Ximdex 4.0
index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.
network
low complexity
ximdex CWE-79
6.1