Products: 1
Vulnerabilities: 2
Known Exploited: 0
1
Critical Level Threats
0
High Level Threats
1
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-38581
Remote SQL Injection in Thai Palliative LTE EZForm Endpoint
Last Modified: Jun 11, 2026
Published: Jun 11, 2026
CVE-2026-38579
Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in damasac thaipalliative_lte through version 3.0 allow remote attackers to inject arbitrary web script or HTML via the idFormMain parameter (line 24), the id parameter (lines 25, 75), and the ptid_key parameter (lines 26, 42) in /substudy/ezform.php. User input is echoed into HTML attributes and JavaScript contexts without encoding.
Last Modified: Jun 09, 2026
Published: Jun 05, 2026
Items Per Page
