66 matches found
PT-2023-28019 · Grupposcai · Grupposcai Realgimm
Name of the Vulnerable Software and Affected Versions: GruppoSCAI RealGimm version 1.1.37p38 Description: Multiple reflected cross-site scripting XSS vulnerabilities in the ErroreNonGestito.aspx component allow attackers to execute arbitrary Javascript in the context of a victim user's browser vi...
CVE-2023-41637
The CVE-2023-41637 entry concerns GruppoSCAI RealGimm 1.1.37p38, where the Carica immagine function is vulnerable to arbitrary file upload via a crafted HTML file, enabling code execution. Supported by multiple sources in the connected set, the root cause is an unvalidated file upload in that ima...
CVE-2023-41637
An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file...
CVE-2023-41638
An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted file...
GruppoSCAI RealGimm SQL Injection Vulnerability
GruppoSCAI RealGimm is a management solution for large property and real estate assets from SCAI. A security vulnerability exists in GruppoSCAI RealGimm version 1.1.37p38, which stems from the presence of a SQL injection vulnerability that allows an attacker to access the database and execute...
