CVE-2023-31294: Improper Neutralization of Formula Elements in a CSV File

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to obtain sensitive information via the Delivery Name field...

CVE-2023-31298: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user...

CVE-2023-31295: Improper Neutralization of Formula Elements in a CSV File

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to obtain sensitive information via the User Profile field...

CVE-2023-31302

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Teller field...

CVE-2023-31299: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Barcode field of a container...

CVE-2023-31302: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Teller field...

CVE-2023-31295

CVE-2023-31295 affects Sesami CPTO (Cash Point & Transport Optimizer) version 6.3.8.6. The issue is a CSV Injection in the User Profile field that allows a remote attacker to obtain sensitive information. Public sources available in the connected documents consistently describe the vulnerability ...

CVE-2023-31294

CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to obtain sensitive information via the Delivery Name field...

Sesami Cash Point & Transport Optimizer Security Vulnerability

Sesami Cash Point & Transport Optimizer is a solution from Sesami, Inc. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6, which stems from the presence of a stored cross-site scripting vulnerability. The vulnerability allows remote attackers to execu...

CVE-2023-31300: Cleartext Transmission of Sensitive Information

An issue was discovered in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 718, allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Password Reset feature...

CVE-2023-31302

Cross Site Scripting XSS vulnerability in Sesami Cash Point & Transport Optimizer CPTO 6.3.8.6 718, allows remote attackers to execute arbitrary code via the Teller field...

Sesami Cash Point & Transport Optimizer Security Vulnerability

Sesami Cash Point & Transport Optimizer is a solution from Sesami, Inc. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6, which stems from the presence of a cross-site scripting vulnerability. This allows remote attackers to execute arbitrary code vi...

CVE-2023-31293: Undefined Security Weakness

An issue was discovered in Sesami Cash Point & Transport Optimizer CPTO 6.3.8.6 718, allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system user's web browser, allowing the journal to be displayed, despite the option...

PT-2023-23288 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log. This is a...

PT-2023-23279 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: An issue was discovered that allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system...

PT-2023-23284 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user. This is a Cross Site...

PT-2023-23278

Name of the Vulnerable Software and Affected Versions Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description An issue in Sesami Cash Point & Transport Optimizer CPTO allows local attackers to obtain sensitive information and bypass authentication via a "Back Button Refresh"...

PT-2023-23282 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows attackers to obtain sensitive information via the User Name field. This is a CSV Injection vulnerability, which can be exploited to gain unauthorized...

PT-2023-23280 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: The issue allows remote attackers to obtain sensitive information via the Delivery Name field. This is a result of a CSV Injection vulnerability. Recommendations: For...

PT-2023-23287 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: An issue in Sesami Cash Point & Transport Optimizer CPTO allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials...