{"vulnerability": "CVE-2020-1594", "sightings": [{"uuid": "01ec4328-8403-45b7-9fe6-f7d20b580f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15941", "type": "seen", "source": "https://t.me/cibsecurity/30029", "content": "\u203c CVE-2020-15941 \u203c\n\nA path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete the files of the server via the name parameter of Deployment Packages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-06T14:37:50.000000Z"}, {"uuid": "3b4c901d-bc12-43fe-a58f-4e4dfedcd411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15940", "type": "seen", "source": "https://t.me/cibsecurity/31633", "content": "\u203c CVE-2020-15940 \u203c\n\nAn improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via the name parameter of various sections of the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-02T21:23:25.000000Z"}, {"uuid": "07a3a5e3-1bd0-4291-996b-ef4dbf36e888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15943", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/1532", "content": "#exploit\nAtlassian Jira <=5.5.4/<=5.5.3\nmodule \"Gantt-Chart for Jira\":\n\n1. CVE-2020-15944:\nCross-Site Scripting\nhttps://seclists.org/fulldisclosure/2020/Aug/1\n\n2. CVE-2020-15943:\nImproper Privilege Management\nhttps://seclists.org/fulldisclosure/2020/Aug/0", "creation_timestamp": "2024-10-17T18:08:05.000000Z"}, {"uuid": "c3e29e86-68d3-4d12-b0b8-4ef483179222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15944", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/1532", "content": "#exploit\nAtlassian Jira <=5.5.4/<=5.5.3\nmodule \"Gantt-Chart for Jira\":\n\n1. CVE-2020-15944:\nCross-Site Scripting\nhttps://seclists.org/fulldisclosure/2020/Aug/1\n\n2. CVE-2020-15943:\nImproper Privilege Management\nhttps://seclists.org/fulldisclosure/2020/Aug/0", "creation_timestamp": "2024-10-17T18:08:05.000000Z"}, {"uuid": "67381070-90fd-4439-b76b-5cee463053cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15949", "type": "seen", "source": "https://t.me/cibsecurity/15864", "content": "\u203c CVE-2020-15949 \u203c\n\nImmuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-05T18:49:14.000000Z"}, {"uuid": "a0beb3a9-3052-4d6a-bd9f-6d80a99e5e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15944", "type": "seen", "source": "https://t.me/cissp/2764", "content": "Atlassian Jira <=5.5.4/<=5.5.3\nmodule \"Gantt-Chart for Jira\":\n1. CVE-2020-15944 - Cross-Site Scripting (PoC)\nhttps://seclists.org/fulldisclosure/2020/Aug/1\n2. CVE-2020-15943 - Improper Privilege Management\nhttps://seclists.org/fulldisclosure/2020/Aug/0 (PoC)", "creation_timestamp": "2026-09-01T17:00:56.736717Z"}, {"uuid": "21716bf2-f8b1-4884-a68e-f22206b78c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15943", "type": "seen", "source": "https://t.me/cissp/2764", "content": "Atlassian Jira <=5.5.4/<=5.5.3\nmodule \"Gantt-Chart for Jira\":\n1. CVE-2020-15944 - Cross-Site Scripting (PoC)\nhttps://seclists.org/fulldisclosure/2020/Aug/1\n2. CVE-2020-15943 - Improper Privilege Management\nhttps://seclists.org/fulldisclosure/2020/Aug/0 (PoC)", "creation_timestamp": "2026-09-01T17:00:56.775288Z"}, {"uuid": "d44270a7-0dc1-4336-a5a7-73fde95ef55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15948", "type": "seen", "source": "https://t.me/hacking_Attack/18075", "content": "Exploit Collector\neGain Chat 15.5.5 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \neGain Chat version 15.5.5 suffers from a cross site scripting vulnerability.\n\nMD5 | 8f713683de3e61e3153e8052e40aa17b\n\nDownload\n# Exploit Title: eGain Chat 15.5.5 Cross-Site Scripting\n# Vendor Homepage: https://www.egain.com/\n# Software Link: https://www.egain.com/chat-software/\n# Exploit Authors: Brandon Ming Yang Ho (https://www.linkedin.com/in/minhobrandon/), Hassy Vinod Eshan (https://www.linkedin.com/in/hassy-vinod/)\n# CVE: CVE-2020-15948\n\n# Timeline\n\n- June 2020:     Initial vulnerability discovery\n- July 2020:     Reported to eGain Corporation\n- August 2020:     Fix/patch provided by eGain Corporation\n- September 2020:   Public disclosure notified to eGain Corporation\n- July 2021:     Published CVE-2020-15948\n\n# 1. Introduction\n\neGain Chat is a real time chat assistance solution by eGain Corporation for website visitors to communicate with chat agents.\n\n# 2. Vulnerability Details\n\neGain Chat version 15.5.5 is vulnerable to reflected Cross-Site Scripting (Reflected XSS).\n\nThe \u201cName\u201d input field (full_name) does not fully sanitise user input for special characters such as \u201c<\u201d\u201d and HTML attributes such as \u201c\u201d. It is possible for an attacker to bypass filtering and create malicious scripts. Once the response has been rendered, the malicious JavaScript code would be executed.\n\n# 3. Proof of Concept\n\nThe \u201cName\u201d input field (full_name) of the chat window can be injected with the following XSS payload as a Proof of Concept to execute a javascript alert popup.\n\nPayload - click\n\n# 4. Remediation\n\nApply the latest fix/patch from eGain Corporation.\n\n# 5. Credits\n\n- Brandon Ming Yang Ho (https://www.linkedin.com/in/minhobrandon/)\n- Hassy Vinod Eshan (https://www.linkedin.com/in/hassy-vinod/)\n\nSource:packetstormsecurity.com\n\u2796 Sent by @TheFeedReaderBot \u2796", "creation_timestamp": "2026-09-01T20:02:30.614999Z"}, {"uuid": "d914d7b5-9312-4888-bf43-d578d0ada510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15948", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/18075", "content": "Exploit Collector\neGain Chat 15.5.5 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-gp6vAY2GXMM/WWlvG3cWkQI/AAAAAAAAILY/aMDesAGFEocqJU-7SaIaO870_Bbf2ZUHACLcBGAs/s1600/h139.png \neGain Chat version 15.5.5 suffers from a cross site scripting vulnerability.\n\nMD5 | 8f713683de3e61e3153e8052e40aa17b\n\nDownload\n# Exploit Title: eGain Chat 15.5.5 Cross-Site Scripting\n# Vendor Homepage: https://www.egain.com/\n# Software Link: https://www.egain.com/chat-software/\n# Exploit Authors: Brandon Ming Yang Ho (https://www.linkedin.com/in/minhobrandon/), Hassy Vinod Eshan (https://www.linkedin.com/in/hassy-vinod/)\n# CVE: CVE-2020-15948\n\n# Timeline\n\n- June 2020:     Initial vulnerability discovery\n- July 2020:     Reported to eGain Corporation\n- August 2020:     Fix/patch provided by eGain Corporation\n- September 2020:   Public disclosure notified to eGain Corporation\n- July 2021:     Published CVE-2020-15948\n\n# 1. Introduction\n\neGain Chat is a real time chat assistance solution by eGain Corporation for website visitors to communicate with chat agents.\n\n# 2. Vulnerability Details\n\neGain Chat version 15.5.5 is vulnerable to reflected Cross-Site Scripting (Reflected XSS).\n\nThe \u201cName\u201d input field (full_name) does not fully sanitise user input for special characters such as \u201c<\u201d\u201d and HTML attributes such as \u201c\u201d. It is possible for an attacker to bypass filtering and create malicious scripts. Once the response has been rendered, the malicious JavaScript code would be executed.\n\n# 3. Proof of Concept\n\nThe \u201cName\u201d input field (full_name) of the chat window can be injected with the following XSS payload as a Proof of Concept to execute a javascript alert popup.\n\nPayload - click\n\n# 4. Remediation\n\nApply the latest fix/patch from eGain Corporation.\n\n# 5. Credits\n\n- Brandon Ming Yang Ho (https://www.linkedin.com/in/minhobrandon/)\n- Hassy Vinod Eshan (https://www.linkedin.com/in/hassy-vinod/)\n\nSource:packetstormsecurity.com\n\u2796 Sent by @TheFeedReaderBot \u2796", "creation_timestamp": "2026-09-07T22:00:06.611983Z"}, {"uuid": "ba97e81c-b51c-4411-876a-2f94b4712c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15944", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2764", "content": "Atlassian Jira <=5.5.4/<=5.5.3\nmodule \"Gantt-Chart for Jira\":\n1. CVE-2020-15944 - Cross-Site Scripting (PoC)\nhttps://seclists.org/fulldisclosure/2020/Aug/1\n2. CVE-2020-15943 - Improper Privilege Management\nhttps://seclists.org/fulldisclosure/2020/Aug/0 (PoC)", "creation_timestamp": "2026-09-11T14:00:05.946257Z"}, {"uuid": "14aaef81-4bd3-45d7-adf4-258376df2a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-15943", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2764", "content": "Atlassian Jira <=5.5.4/<=5.5.3\nmodule \"Gantt-Chart for Jira\":\n1. CVE-2020-15944 - Cross-Site Scripting (PoC)\nhttps://seclists.org/fulldisclosure/2020/Aug/1\n2. CVE-2020-15943 - Improper Privilege Management\nhttps://seclists.org/fulldisclosure/2020/Aug/0 (PoC)", "creation_timestamp": "2026-09-11T14:00:05.996432Z"}]}