Skip to content
OpenAdvisories

Vendor

onSite internet

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    onSite internet GmbH Auktion NG Auktionssoftware Public Password Reset Endpoint forgotpasswd.html cross site scripting

    A vulnerability has been found in onSite internet GmbH Auktion NG Auktionssoftware up to 20260722. This affects an unknown part of the file /forgotpasswd.html of the component Public Password Reset Endpoint. The manipulation of the argument email leads to cro…