Sungard : Security Vulnerabilities, CVEs,
Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultant from a CSRF vulnerability, but there are insufficient details to be sure.
Max CVSS
4.3
EPSS Score
0.40%
Published
2008-10-24
Updated
2018-10-11
Cross-site scripting (XSS) vulnerability in the twbkwbis.P_SecurityQuestion (aka Change Security Question) page in SunGard Banner Student System 7.4 allows remote attackers to inject arbitrary web script or HTML via the New Question field.
Max CVSS
4.3
EPSS Score
0.13%
Published
2010-07-12
Updated
2018-10-10
2 vulnerabilities found