CVE-2023-40362

CVE-2023-40362 CVE-2023-40362 漏洞详情及概念验证。 概述 Click2Gov BP 在 URI /Click2GovBP/mastercontractorlist.html 存在访问控制漏洞，导致已认证用户能够利用受害者的用户 ID 以及待删除承包商的信息，从其他用户的账户中删除承包商。 造成此漏洞的原因是 Web 应用程序未能验证用户是否有权从指定用户 ID 的账户中删除承包商。 厂商 : CentralSquare 报告人 : Ally Petitt 发现时间 : 2023年6月13日 受影响产品 : Click2Gov Building Permits...

CVE-2024-45241

POC - CVE-2024-45241: Path Traversal en CentralSquare CryWolf Resumen de la Vulnerabilidad Identificador CVE: CVE-2024-45241 Producto: CentralSquare CryWolf Gestión de Falsas Alarmas Componente Afectado: GeneralDocs.aspx Tipo de Vulnerabilidad: Path Traversal Fecha de Descubrimiento: 2024-08-09...

CVE-2023-40362

An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protections allows remote attackers to arbitrarily delete the contractors from any user's account when the user ID and contractor information is known...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

EUVD-2025-131924

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

CVE-2025-59491

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

CVE-2025-59491

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CentralSquare Community Development 安全漏洞

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7 that stems from unfiltered input in the permitno field, which could lead to an SQL...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

PT-2025-46672

Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description An authentication bypass issue exists in CentralSquare Community Development 19.5.7, allowing unauthorized access to the admin panel without requiring administrative credentials. T...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

PT-2025-46671

Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description A SQL Injection issue exists in CentralSquare Community Development 19.5.7. Attackers can inject SQL code through the permit no field. Recommendations Update to a newer version tha...

CVE-2025-64281

CVE-2025-64281 describes an authentication bypass in CentralSquare Community Development version 19.5.7 that allows attackers to access the admin panel without admin credentials. The connected sources confirm the affected product and version, the issue is labeled as a high-impact vulnerability (C...

CentralSquare Community Development 安全漏洞

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7 that originates from cross-site scripting in form fields...

CVE-2025-59491

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...