CVE-2025-1642

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical. This vulnerability affects unknown code of the file /AGE0000700/GetImageMedico?fooId=1. The manipulation of the argument fooId leads to improper control of resource identifiers. The attack can be initiat...

CVE-2025-1643 Benner ModernaNet SG_AlterarSenha cross-site request forgery

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /DadosPessoais/SGAlterarSenha. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.1....

CVE-2025-1643 Benner ModernaNet SG_AlterarSenha cross-site request forgery

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /DadosPessoais/SGAlterarSenha. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.1....

CVE-2025-1643

Benner ModernaNet (versions up to 1.1.0) contains a cross-site request forgery vulnerability in the /DadosPessoais/SG_AlterarSenha handling. The issue could be triggered remotely and affects user-initiated actions leading to unauthorized state changes. Remediation: upgrade to version 1.1.1, which...

CVE-2025-1642 Benner ModernaNet GetImageMedico resource injection

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical. This vulnerability affects unknown code of the file /AGE0000700/GetImageMedico?fooId=1. The manipulation of the argument fooId leads to improper control of resource identifiers. The attack can be initiat...

CVE-2025-1642 Benner ModernaNet GetImageMedico resource injection

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical. This vulnerability affects unknown code of the file /AGE0000700/GetImageMedico?fooId=1. The manipulation of the argument fooId leads to improper control of resource identifiers. The attack can be initiat...

CVE-2025-1642

Benner ModernaNet up to version 1.1.0 contains a vulnerability in the file /AGE0000700/GetImageMedico?fooId=1 where manipulation of the fooId argument leads to improper control of resource identifiers. The issue can be triggered remotely and affects unknown code paths; upgrading to version 1.1.1 ...

CVE-2025-1640

A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file...

CVE-2025-1640

A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file...

CVE-2025-1641

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file...

CVE-2025-1641

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file...

CVE-2025-1641

CVE-2025-1641 affects Benner ModernaNet up to version 1.1.0. The vulnerability is a SQL injection in an endpoint under /AGE0000700/GetHorariosDoDia (with parameters such as idespec, idproced, data, agserv, convenio, localatend, idplano, pesfis, idprofissional, target). It is exploitable remotely ...

CVE-2025-1641 Benner ModernaNet GetHorariosDoDia sql injection

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file...

CVE-2025-1641 Benner ModernaNet GetHorariosDoDia sql injection

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file...

CVE-2025-1640 Benner ModernaNet JS_CarregaCombo sql injection

A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file...

CVE-2025-1640

CVE-2025-1640 affects Benner ModernaNet (versions up to 1.1.0). The issue is described as an SQL injection vulnerability in the endpoint path “/Home/JS_CarregaCombo?formName=DADOS_PESSOAIS_PLANO&...&elementToReturn=DADOS_PESSOAIS_PLANO&ordenarPelaDescricao=true&direcaoOrdenacao=asc&_=173929004729...

CVE-2025-1640 Benner ModernaNet JS_CarregaCombo sql injection

A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file...

CVE-2025-1644: Cross-Site Request Forgery (CSRF)

A vulnerability classified as problematic has been found in Benner ModernaNet up to 1.2.0. Affected is an unknown function of the file /DadosPessoais/SGGravar. The manipulation of the argument idItAg leads to cross-site request forgery. It is possible to launch the attack remotely. Upgrading to...

PT-2025-7803 · Benner · Benner Modernanet

Name of the Vulnerable Software and Affected Versions: Benner ModernaNet versions up to 1.1.0 Description: A critical issue affects some unknown functionality of the file /Home/JS CarregaCombo?formName=DADOS PESSOAIS PLANO&additionalCondition=&insideParameters=&elementToReturn=DADOS PESSOAIS...

PT-2025-7804 · Benner · Benner Modernanet

Name of the Vulnerable Software and Affected Versions: Benner ModernaNet versions 1.1.0 and earlier Description: A critical issue has been found in Benner ModernaNet, affecting an unknown part of the file...