CVE-2017-20045

CVE-2017-20045 affects Navetti PricePoint 4.6.0.0. The issue is described as a cross-site request forgery affecting unknown code, with remote initiation possible. Multiple connected sources corroborate that upgrading to version 4.7.0.0 addresses the issue. The CVE notes the exploit has been discl...

CVE-2017-20045 Navetti PricePoint cross-site request forgery

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading t...

CVE-2017-20045 Navetti PricePoint cross-site request forgery

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading t...

CVE-2017-20044 Navetti PricePoint Reflected cross site scriting

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to basic cross site scripting Reflected. It is possible to initiate the attack remotely. Upgrading to version 4.7.0.0 is able to address this issue...

CVE-2017-20044 Navetti PricePoint Reflected cross site scriting

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to basic cross site scripting Reflected. It is possible to initiate the attack remotely. Upgrading to version 4.7.0.0 is able to address this issue...

CVE-2017-20044

CVE-2017-20044 affects Navetti PricePoint 4.6.0.0. The connected sources describe a basic cross-site scripting (Reflected) vulnerability that can be initiated remotely. Upgrading to version 4.7.0.0 addresses the issue. Affected component details and exact root cause are not elaborated beyond “unk...

CVE-2017-20043 Navetti PricePoint Persistent cross site scriting

A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting Persistent. The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this...

CVE-2017-20043 Navetti PricePoint Persistent cross site scriting

A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting Persistent. The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this...

CVE-2017-20043

CVE-2017-20043 affects Navetti PricePoint 4.6.0.0, where a basic cross-site scripting (Persistent) vulnerability exists in an unknown functionality. The issue can be exploited remotely, with remediation provided by upgrading to Navetti PricePoint 4.7.0.0. The public records consistently describe ...

CVE-2017-20042

The vulnerability affects Navetti PricePoint 4.6.0.0 . It arises from an issue in an unknown functionality that enables blind SQL injection , which can be exploited remotely. The issue is addressed by upgrading to 4.7.0.0 ; applying this version is the recommended remediation.

CVE-2017-20042 Navetti PricePoint Blind sql injection

A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection Blind. The attack can be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It i...

CVE-2017-20042 Navetti PricePoint Blind sql injection

A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection Blind. The attack can be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It i...

Navetti PricePoint 跨站脚本漏洞

Navetti PricePoint is a unique pricing software solution from Navetti. Designed to allow companies with international sales operations to develop locally based pricing structures that take unique local factors into account to achieve the best price for their product or service. A cross-site...

PT-2022-7915 · Navetti · Navetti Pricepoint

Name of the Vulnerable Software and Affected Versions: Navetti PricePoint version 4.6.0.0 Description: A critical issue has been found in the software, affecting an unknown functionality. This issue leads to sql injection Blind and can be exploited remotely. Recommendations: For Navetti PricePoin...

Navetti PricePoint 跨站请求伪造漏洞

Navetti PricePoint is a unique pricing software solution from Navetti. Designed to allow companies with international sales operations to develop locally based pricing structures that take unique local factors into account to achieve the best price for their product or service. A cross-site reque...

Navetti PricePoint 跨站脚本漏洞

Navetti PricePoint is a unique pricing software solution from Navetti. Designed to allow companies with international sales operations to develop locally based pricing structures that take unique local factors into account to achieve the best price for their product or service. A cross-site...

PT-2022-7916 · Navetti · Navetti Pricepoint

Name of the Vulnerable Software and Affected Versions: Navetti PricePoint version 4.6.0.0 Description: A vulnerability was found in Navetti PricePoint, classified as problematic. The issue affects some unknown functionality and leads to basic cross site scripting Persistent. The attack can be...

PT-2022-7918 · Navetti · Navetti Pricepoint

Name of the Vulnerable Software and Affected Versions: Navetti PricePoint version 4.6.0.0 Description: A critical issue has been found, affecting unknown code and leading to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

PT-2022-7917 · Navetti · Navetti Pricepoint

Name of the Vulnerable Software and Affected Versions: Navetti PricePoint version 4.6.0.0 Description: A vulnerability was found in Navetti PricePoint, classified as problematic. This issue affects an unknown part of the system and leads to basic cross site scripting Reflected. The attack can be...

Navetti PricePoint 4.6.0.0 XSS / CSRF / SQL Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Navetti PricePoint vulnerable version: 4.6.0.0 fixed version: 4.7.0.0 or higher CVE number: - impact: high/critical homepage:...