CVE-2021-37195

MEDIUM Year: 2021
CVSS v3 Score
6.1
Medium
CVSS v2 Score
2.6
Low
Weakness Type
CWE-80
View all →

Vulnerability Description

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used). The COMOS Web component of COMOS accepts arbitrary code as attachment to tasks. This could allow an attacker to inject malicious code that is executed when loading the attachment.

Related Vulnerabilities

CVE-2003-5003

MEDIUM
CVSS:6.1(Medium)

A vulnerability was found in ISS BlackICE PC Protection. It has been rated as problematic. Affected by this issue is the Update Handler. The manipulation with an unknown input leads to cross site scri...

CWE-802003

CVE-2006-0149

MEDIUM
CVSS:6.1(Medium)

Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.

CWE-802006

CVE-2008-10001

MEDIUM
CVSS:6.1(Medium)

A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remot...

CWE-802008

CVE-2016-9493

MEDIUM
CVSS:6.1(Medium)

The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php file, upload file types are checked against a hard-co...

CWE-802016

CVE-2016-9500

MEDIUM
CVSS:6.1(Medium)

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable t...

CWE-802016

CVE-2017-16015

MEDIUM
CVSS:6.1(Medium)

Forms is a library for easily creating HTML forms. Versions before 1.3.0 did not have proper html escaping. This means that if the application did not sanitize html on behalf of forms, use of forms ma...

CWE-802017