Fenceposterror

Name of the Vulnerable Software and Affected Versions: TITool PrintMonitor solution (affected versions not specified) Description: The issue concerns the `username` parameter in the login request of the TITool PrintMonitor solution, which is vulnerable to SQL injection, specifically time-based blind SQLi. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows PHP Object Instantiation via "democratic.ajax.php" and "democratic.class.php".

Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server versions prior to 6.3.4 Description: The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro in the usermacros resource. Recommendations: For versions prior to 6.3.4, update to version 6.3.4 or later to resolve the issue.