54 matches found
Hardcoded credentials
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP address...
CVE-2022-24862: Server-Side Request Forgery (SSRF)
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be downloaded first, but this address wi...
CVE-2022-24861: Improper Input Validation
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has remote code execution vulnerability. JDBC drivers are not validated prior to use and may be provided by users of the system. This can lead to code execution by any basic user who has access to...
Database input validation vulnerability
Databasir is a team-oriented document management platform for relational database models. A security vulnerability exists in Databasir 1.01 that originates from the JDBC driver being unauthenticated before use leading to code execution by any basic user with access to the system...
PT-2022-16935
Name of the Vulnerable Software and Affected Versions Databasir version 1.01 Description Databasir is a team-oriented relational database model document management platform. It has a remote code execution issue due to the lack of validation of JDBC drivers prior to use, which may be provided by...
Database code issues and vulnerabilities
Databasir is a team-oriented relational database model document management platform. A security vulnerability exists in Databasir 1.01. The vulnerability stems from the fact that during the JDBC driver download validation process, the corresponding JDBC driver download address is downloaded first...
PT-2022-16936
Name of the Vulnerable Software and Affected Versions Databasir version 1.01 Description Databasir is a team-oriented relational database model document management platform. It has a Server-Side Request Forgery issue. During the download verification process of a JDBC driver, the corresponding JD...
CVE-2022-24860
Databasir 1.01 contains a hard-coded cryptographic key vulnerability that lets an attacker generate login credentials for any user and access the backend service at different IP addresses. This is described across multiple sources (NVD description, Red Hat entry, CVE listings) as a use of hard-co...
CVE-2022-24860
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP address...
CVE-2022-24860 Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP address...
CVE-2022-24860 Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP address...
Databasir: Trust management vulnerabilities
Databasir is a relational database model document management platform for teams. A security vulnerability exists in Databasir 1.01, which stems from the fact that an attacker can use hard-coded login credentials to generate any user's login credentials and log in to the backend of a service locat...
PT-2022-16934
Name of the Vulnerable Software and Affected Versions Databasir version 1.01 Description Databasir is a team-oriented relational database model document management platform. It has a Use of Hard-coded Cryptographic Key issue. An attacker can use hard coding to generate login credentials of any us...
CVE-2022-24860: Use of Hard-coded Cryptographic Key
Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP address...