CVE-2019-13448

An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could exploit the vulnerable function in order to prepare an XSS payload to send to the product's clients.

• CWE-79

• https://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/Third Party Advisory
• https://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/Third Party Advisory

Published

Jul 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13423Search Guard Kibana Plugin versions before 5.6.8-7 and befor…8.8
• CVE-2019-1343A denial of service vulnerability exists when Windows improp…6.5
• CVE-2019-1344An information disclosure vulnerability exists in the way th…5.5
• CVE-2019-13445An issue was discovered in the ROS communications-related pa…9.8
• CVE-2019-13446Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-13447An issue was discovered in Sertek Xpare 3.67. The login form…
• CVE-2019-13449In the Zoom Client before 4.4.2 on macOS, remote attackers c…
• CVE-2019-1345An information disclosure vulnerability exists when the Wind…5.5
• CVE-2019-13450In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.…
• CVE-2019-13451In Xymon through 4.3.28, a buffer overflow vulnerability exi…
• CVE-2019-13452In Xymon through 4.3.28, a buffer overflow vulnerability exi…
• CVE-2019-13453Zipios before 0.1.7 does not properly handle certain malform…