CVE-2019-5889

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5889

CVE-2019-5889 concerns a log-management directory traversal vulnerability in OverIT Geocall, affecting version 6.3 prior to build 2:346977. The root cause is a failure to properly filter path elements in the log-management component, enabling access to locations outside of a restricted directory....

CVE-2019-5888

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5888

OverIT Geocall 6.3 is affected by multiple Cross‑Site Scripting (XSS) vulnerabilities in builds prior to 2:346977. The issue stems from insufficient validation of client‑side data in the WEB application, enabling potential execution of arbitrary script in the context of a user’s browser. Remediat...

PT-2019-17847 · Overit · Overit Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall versions prior to 6.3 build 2:346977 Description: A directory traversal issue was discovered in the log-management component. Recommendations: For OverIT Geocall versions prior to 6.3 build 2:346977, update to a version that...

PT-2019-17846 · Overit · Overit Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall versions 6.3 before build 2:346977 Description: Multiple XSS vulnerabilities were discovered. Recommendations: For OverIT Geocall version 6.3, update to a version after build 2:346977 to resolve the issue...

PT-2019-17849 · Overit · Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall versions prior to 6.3 build 2:346977 Description: An issue allows an unauthenticated attacker to obtain a cookie of an authenticated user and login to the web application through an unauthenticated servlet. Recommendations: For...