PT-2023-15481 · Serenissima Informatica · Serenissima Informatica Fast Checkin

Name of the Vulnerable Software and Affected Versions: Serenissima Informatica Fast Checkin version 1.0 Description: The issue is related to Directory Traversal. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

Serenissima Informatica Fast Checkin SQL注入漏洞

Serenissima Informatica Fast Checkin is an application from Serenissima, Inc. A security vulnerability exists in Serenissima Informatica Fast Checkin version 1.0, which stems from the fact that it allows an attacker to implement SQL injection...

CVE-2022-47769

An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root of the application to gain access to the server via the web shell...

CVE-2022-47769: Unrestricted Upload of File with Dangerous Type

An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root of the application to gain access to the server via the web shell...

CVE-2022-47768: Improper Limitation of a Pathname to a Restricted Directory

Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal...

CVE-2022-47770

Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection...

CVE-2022-47768

Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal...

Serenissima Informatica Fast Checkin 代码问题漏洞

Serenissima Informatica Fast Checkin is an application from Serenissima, Inc. A security vulnerability exists in Serenissima Informatica Fast Checkin version 1.0, which originates from a vulnerability that allows an unauthenticated attacker to access the server via the web shell by uploading...

CVE-2022-47770: Improper Neutralization of Special Elements used in an SQL Command

Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection...

CVE-2022-47770

CVE-2022-47770 affects Serenissima Informatica Fast Checkin v1.0 and is due to an Unauthenticated SQL Injection vulnerability. The issue exposes high-severity impact across confidentiality, integrity, and availability (CVSS v3.1 base score 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Documented det...

Joomla Solidres 2.12.9 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

checkin-kirchhellen.de Cross Site Scripting vulnerability OBB-1325441

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2019-11653

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...

CVE-2019-11653

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...

CVE-2019-11653

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...

CVE-2019-11653: Undefined Security Weakness

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...

SQL Injection Vulnerability in Opensns CheckInController.class.php Page

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. A SQL injection vulnerability exists in the Opensns CheckInController.class.php page. An attacker can exploit the vulnerability to obtain sensitiv...

Yelp: Requesting Show CheckIn Alert for Non Friend User

During analysis it was observed that I was able to request "ShowCheck In Alert" Request for non friend user. I performed this application from Mobile application. Below are the steps we have to carry to achieve this: Logged in to Yelp Mobile Application Visit any added friend and click on...

Remote code execution

Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code...

CVE-2016-1000003

CVE-2016-1000003 affects Mirror Manager versions 0.7.2 and earlier, with a remote code execution flaw in the checkin code. Exploitation would come from a remote attacker without authentication to run arbitrary code on the affected system; impact includes full compromise of the host depending on p...