Skip to content
OpenAdvisories

Vendor

AVE S.p.A.

1 known vulnerabilities.

Products

DOMINAplus 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2019-25233

    AVE DOMINAplus 1.10.x Cross-Site Request Forgery and XSS Vulnerabilities

    AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to exploit login.php parameters and execute…

    AVE S.p.A. DOMINAplus