CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

CVE-2019-5890

Affected software: OverIT Geocall 6.3 (before build 2:346977). Vulnerability: Weak authentication and session management allow an authenticated user to access the Administrative control panel and execute administrative functions. Root cause (as described): Improper session handling enabling eleva...

CVE-2019-5889

CVE-2019-5889 concerns a log-management directory traversal vulnerability in OverIT Geocall, affecting version 6.3 prior to build 2:346977. The root cause is a failure to properly filter path elements in the log-management component, enabling access to locations outside of a restricted directory....

CVE-2019-5889

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5888

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5888

OverIT Geocall 6.3 is affected by multiple Cross‑Site Scripting (XSS) vulnerabilities in builds prior to 2:346977. The issue stems from insufficient validation of client‑side data in the WEB application, enabling potential execution of arbitrary script in the context of a user’s browser. Remediat...

CVE-2019-5889: Improper Limitation of a Pathname to a Restricted Directory

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

PT-2019-17846 · Overit · Overit Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall versions 6.3 before build 2:346977 Description: Multiple XSS vulnerabilities were discovered. Recommendations: For OverIT Geocall version 6.3, update to a version after build 2:346977 to resolve the issue...

CVE-2019-5888: Improper Neutralization of Input During Web Page Generation

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5890: Improper Authentication

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

PT-2019-17847 · Overit · Overit Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall versions prior to 6.3 build 2:346977 Description: A directory traversal issue was discovered in the log-management component. Recommendations: For OverIT Geocall versions prior to 6.3 build 2:346977, update to a version that...

CVE-2019-5891: Undefined Security Weakness

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application...

PT-2019-17849 · Overit · Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall versions prior to 6.3 build 2:346977 Description: An issue allows an unauthenticated attacker to obtain a cookie of an authenticated user and login to the web application through an unauthenticated servlet. Recommendations: For...