70 matches found
GESTSUP 跨站请求伪造漏洞
GESTSUP is a software application from the French company GESTSUP. It is 100% web-based SUPport MANAGEMENT software that manages tickets and devices. A cross-site request forgery vulnerability exists in GestSup 3.2.56 and prior versions, which stems from the application's failure to validate the...
GESTSUP SQL注入漏洞
GESTSUP is a software application from the French company GESTSUP. It is 100% web-based SUPport MANAGEMENT software that manages tickets and devices. A SQL injection vulnerability exists in GestSup 3.2.56 and prior versions, which stems from user-controlled inputs in the work order creation...
GESTSUP SQL注入漏洞
GESTSUP is a software application from the French company GESTSUP. It is 100% web-based SUPport MANAGEMENT software that manages tickets and devices. A SQL injection vulnerability exists in GESTSUP 3.2.56 and prior versions, which arises from user-controlled search input in the search bar feature...
GESTSUP SQL注入漏洞
GESTSUP is a software application from the French company GESTSUP. It is 100% web-based SUPport MANAGEMENT software that manages tickets and devices. A SQL injection vulnerability exists in GESTSUP 3.2.56 and prior versions, which stems from multiple request parameters for filtering, searching, o...
PT-2026-2171
Name of the Vulnerable Software and Affected Versions GestSup versions up to and including 3.2.56 Description GestSup versions up to and including 3.2.56 contain a pre-authentication stored cross-site scripting XSS issue in the API error logging functionality. An unauthenticated attacker can inje...
PT-2026-2169
Name of the Vulnerable Software and Affected Versions GestSup versions up to and including 3.2.56 Description GestSup versions up to and including 3.2.56 contain a SQL injection issue in the ticket creation functionality. User-controlled input during ticket creation is used in SQL queries without...
EUVD-2023-56739
Malicious code in bioql PyPI...
CVE-2023-52059
A cross-site scripting XSS vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field...
CVE-2023-52060
A Cross-Site Request Forgery CSRF in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request...
CVE-2023-52059
A cross-site scripting XSS vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field...
CVE-2023-52060
A Cross-Site Request Forgery CSRF in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request...
CVE-2023-52059
A cross-site scripting XSS vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field...
Cross site scripting
A cross-site scripting XSS vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request...
GESTSUP Security Vulnerabilities
GESTSUP is a software application from the French company GESTSUP. It is 100% web-based SUPport MANAGEMENT software that manages tickets and devices. A security vulnerability exists in GESTSUP version v3.2.46, which stems from the presence of a cross-site scripting XSS vulnerability that allows a...
CVE-2023-52060
CVE-2023-52060 is a CSRF flaw in GESTSUP v3.2.46 that allows an attacker to arbitrarily edit user profile information via a crafted request. Documents consistently identify the affected product as GESTSUP (web-based application) and the vulnerability type as CSRF, with the impact described as una...
CVE-2023-52060
A Cross-Site Request Forgery CSRF in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request...
CVE-2023-52059
CVE-2023-52059 affects Gestsup v3.2.46 with a cross-site scripting (XSS) vulnerability in the Description text field. The underlying issue is likely insufficient input sanitization, enabling an attacker to inject arbitrary web scripts/HTML and potentially compromise a user session or page integri...
GESTSUP Security Vulnerabilities
GESTSUP is a software application from the French company GESTSUP. It is 100% web-based SUPport MANAGEMENT software that manages tickets and devices. A security vulnerability exists in GESTSUP version v3.2.46, which stems from the presence of a cross-site request forgery CSRF vulnerability that...
