CVE-2020-15539

SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...

CVE-2020-15538

XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...

Sql injection

SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...

Sql injection

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...

Cross site scripting

XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...

CVE-2020-15538

The CVE-2020-15538 entry concerns the We-COM Municipality portal CMS, version 2.1.x. Concrete details in connected documents indicate a cross-site scripting vulnerability arising from insufficient validation of client-side data in the web application, exploitable via the cerca/ search bar. Impact...

CVE-2020-15538

XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...

CVE-2020-15539

SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...

CVE-2020-15539

CVE-2020-15539 affects We-COM Municipality portal CMS 2.1.x. Multiple connected sources confirm an SQL injection vulnerability exploitable via the cerca/ keywords field, caused by insufficient input validation and unsafe SQL construction. Public references note that exploitation could allow remot...

CVE-2020-15540

CVE-2020-15540 affects We-COM OpenData CMS 2.0 and is caused by a lack of validation of externally entered SQL statements in the database backend, enabling SQL injection via the administrator username field. Reported technical details in connected sources confirm the vulnerability enables arbitra...

aas916.com Cross Site Scripting vulnerability OBB-1216882

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bysf9.com Cross Site Scripting vulnerability OBB-1216547

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ms7000.com Cross Site Scripting vulnerability OBB-1216512

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

kyguinhadat43.com Cross Site Scripting vulnerability OBB-1216506

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

hyyl090.com Cross Site Scripting vulnerability OBB-1216469

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-15539: Improper Neutralization of Special Elements used in an SQL Command

SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field...

CVE-2020-15540: Improper Neutralization of Special Elements used in an SQL Command

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-15538: Improper Neutralization of Input During Web Page Generation

XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar...

PT-2020-14489

Name of the Vulnerable Software and Affected Versions We-com Municipality portal CMS versions 2.1.x Description SQL injection can occur via the cerca/ keywords field. This issue allows for potential data manipulation and unauthorized access. Recommendations For We-com Municipality portal CMS...

PT-2020-14488

Name of the Vulnerable Software and Affected Versions We-com Municipality portal CMS versions 2.1.x Description The issue allows for XSS to occur via the cerca/search bar. Recommendations For We-com Municipality portal CMS versions 2.1.x, consider restricting access to the cerca/search bar until ...