29 matches found
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
EUVD-2021-14841
Malware in sbrugna...
编号撤回
ring is a library by Brian Smith, a personal developer. This CVE number has been withdrawn...
CVE-2020-35775
CITSmart before 9.1.2.23 allows LDAP Injection...
CITSmart ITSM 9.1.2.22 LDAP Injection
Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Date: 29/12/2020 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the usernam...
CITSmart ITSM 9.1.2.27 SQL Injection
Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Date: 11/03/2021 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.2...
CITSmart ITSM 9.1.2.22 - LDAP Injection Vulnerability
Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the username field of login...
CITSmart ITSM 9.1.2.27 - (query) Time-based Blind SQL Injection (Authenticated) Vulnerability
Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.28 Vendor has...
CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)
Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Date: 11/03/2021 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.2...
CITSmart ITSM 9.1.2.22 - LDAP Injection
Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Date: 29/12/2020 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the usernam...
CITSmart SQL Injection Vulnerability
CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. A SQL injection vulnerability exists in CITSmart versions prior to 9.1.2.28, which stems from the incorrect handling of "filtro de autocomplete...". No details of the vulnerability are...
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
Information disclosure
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
CVE-2021-28142
CVE-2021-28142 affects CITSmart ITSM prior to 9.1.2.28, where the application mishandles the autocomplete filter and allows a SQL injection via the query parameter in the autoCompletePortal path. Multiple connected documents confirm this is a SQL Injection vulnerability (tested as Time-based Blin...
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
PT-2021-17768
Name of the Vulnerable Software and Affected Versions: CITSmart versions prior to 9.1.2.28 Description: The issue is related to the mishandling of the filtro de autocomplete feature. Recommendations: For versions prior to 9.1.2.28, update to version 9.1.2.28 or later to resolve the issue...
CITSmart SQL注入漏洞
CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. A SQL injection vulnerability exists in CITSmart versions prior to 9.1.2.28, which stems from the incorrect handling of "filtro de autocomplete...". No details of the vulnerability are...
