Topnew

topnew

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-7547 1Topnew 1Sidu Jun 17, 2026 Feb 6, 2019 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 An issue was discovered in SIDU 6.0. Because the database name is not strictly filtered, the attacker can insert a name containing an XSS Payload, leading to stored XSS.
CVE-2019-7546 1Topnew 1Sidu Jun 17, 2026 Feb 6, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in SIDU 6.0. The dbs parameter of the conn.php page has a reflected Cross-site Scripting (XSS) vulnerability.