📦 Ecase Audit

This CVE describes an authorization bypass vulnerability in OPEXUS eCASE Audit where authenticated attackers can modify client-side JavaScript or craft HTTP requests to access disabled administrator f...

This is a stored cross-site scripting (XSS) vulnerability in OPEXUS eCASE Audit software. Authenticated attackers can inject malicious JavaScript into the 'Estimated Staff Hours' field, which executes...

This is a stored cross-site scripting (XSS) vulnerability in OPEXUS eCASE Audit software. Authenticated attackers can inject malicious JavaScript into the 'A or SIC Number' field during project setup,...

This is a stored cross-site scripting (XSS) vulnerability in OPEXUS eCASE Audit. An authenticated attacker can inject malicious JavaScript into comments via the Document Check Out functionality, which...