Vulnerabilidades de Zucchetti

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Zucchetti: 2 registro(s), com severidade, exploração e correções.

Ad Hoc Infinity 1 Infinity Zmaintenance 1 Infinity Zucchetti 1

Somente exploradas (KEV) →

CVE-2025-61431 Média · 6.1 CWE-79 04/11/2025

Cross-site Scripting (XSS) em Zucchetti Infinity Zmaintenance

A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinity Zucchetti v4.1 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the pHtmlSource parameter. A vendor fix was released on 2025-06-18.

CVE-2025-52180 Média · 6.1 CWE-79 30/10/2025

Cross-site Scripting (XSS) em Zucchetti Ad Hoc Infinity

Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated attackers to inject arbitrary JavaScript via the pHtmlSource parameter of the /ahi/jsp/gsfr_feditorHTML.jsp?pHtmlSource endpoint.