Lucene search
+L

73 matches found

CVE
CVE
added 2023/12/29 12:00 a.m.67 views

CVE-2023-31296

Affected software/product: Sesami CPTO (Cash Point & Transport Optimizer) — version 6.3.8.6 (#718). Vulnerability type / vector: CSV Injection via the User Name field. Root cause / impact: The issue enables an attacker to obtain sensitive information; documentation notes a CSV injection risk with...

5.3CVSS5.2AI score0.00376EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/29 12:00 a.m.26 views

CVE-2023-31299

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Barcode field of a container...

6.3AI score0.00455EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/29 12:00 a.m.12 views

Sesami Cash Point & Transport Optimizer Security Vulnerability

Sesami Cash Point & Transport Optimizer is a solution from Sesami Corporation. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6, which stems from an unknown issue. The vulnerability allows a local attacker to obtain sensitive information and bypass...

5.5CVSS6.4AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.9 views

PT-2023-23287 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: An issue in Sesami Cash Point & Transport Optimizer CPTO allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials...

7.5CVSS7.4AI score0.0036EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.12 views

PT-2023-23284 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user. This is a Cross Site...

4.8CVSS5.4AI score0.00436EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.14 views

PT-2023-23288 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log. This is a...

6.1CVSS6.3AI score0.00455EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.9 views

PT-2023-23279 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: An issue was discovered that allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system...

4.3CVSS4.6AI score0.00474EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.10 views

PT-2023-23281 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to obtain sensitive information via the User Profile field. This is a CSV Injection vulnerability, which can be exploited by attackers...

7.5CVSS7.8AI score0.00579EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.10 views

PT-2023-23289 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: A Cross Site Scripting XSS issue allows remote attackers to execute arbitrary code via the Teller field. This enables attackers to inject malicious scripts into the...

6.1CVSS6.3AI score0.00455EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.11 views

PT-2023-23280 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to obtain sensitive information via the Delivery Name field. This is a result of a CSV Injection vulnerability. Recommendations: For...

7.5CVSS7.6AI score0.00579EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.12 views

PT-2023-23282 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows attackers to obtain sensitive information via the User Name field. This is a CSV Injection vulnerability, which can be exploited to gain unauthorized...

5.3CVSS7.3AI score0.00376EPSS
SaveExploits0References6
OSV
OSV
added 2023/12/25 7:15 a.m.6 views

CVE-2023-31297

An issue was discovered in SESAMI planfocus CPTO Cash Point & Transport Optimizer 6.3.8.6 718. There is XSS via the Name field when modifying a client...

4.8CVSS5.8AI score0.0031EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/12/25 7:15 a.m.13 views

CVE-2023-31297

An issue was discovered in SESAMI planfocus CPTO Cash Point & Transport Optimizer 6.3.8.6 718. There is XSS via the Name field when modifying a client...

4.8CVSS5.8AI score0.0031EPSS
SaveExploits0References3
Rows per page
Query Builder