Cross site scripting

The mtxtNom y mtxtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data...

CVE-2021-4046

The CVE-2021-4046 issue affects TCMAN GIM v8.01. A persistent XSS exists in the m_txtNom and m_txtCognoms parameters due to insufficient input filtering/escaping. Impact is browser-based attacks, including hijacking or data theft, as described across sources (NVD/NVD-derived entries, PT-2022-1124...

Tcman Gim 跨站脚本漏洞

Tcman Gim is a facility management software from the Spanish company Tcman designed for use on mobile devices. A cross-site scripting vulnerability exists in TCMAN GIM version v8.01, which stems from a lack of effective filtering and escaping of the mtxtNom y mtxtCognoms parameters in the softwar...

CVE-2021-4046

The mtxtNom y mtxtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data...

TCMAN GIM Open Redirect Vulnerability

TCMAN Gim is facility management software designed for use on mobile devices.TCMAN GIM contains an open redirection vulnerability that could be exploited by an attacker to redirect users to an attacker-controlled page and obtain information...

TCMAN GIM License Ask Vulnerability (CNVD-2022-07491)

TCMAN Gim is a facility management software designed for use on mobile devices.TCMAN GIM has an authorization question vulnerability that could be exploited by attackers to gain access to information...

CVE-2021-40850

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx...

CVE-2021-40852

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information...

CVE-2021-40853

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...

CVE-2021-40850

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx...

CVE-2021-40851

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...

CVE-2021-40853

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...

CVE-2021-40851

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...

CVE-2021-40852

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information...

Sql injection

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx...

Authorization

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...

Information disclosure

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...

Open redirect

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information...

CVE-2021-40853

TCMAN GIM is described as lacking authorization checks when accessing certain resources, allowing remote attackers to reach URLs requiring privileges and potentially obtain sensitive information. Affected software: TCMAN GIM (mobile facility management software). Root cause: missing authorization...

CVE-2021-40853 TCMAN GIM missing authorization vulnerability

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...