79 matches found
CVE-2024-48360
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...
CVE-2024-48359
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
CVE-2023-47253
Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter...
CVE-2024-48360
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...
CVE-2024-48359
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
CVE-2024-48359
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
CVE-2024-48360
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...
CVE-2024-48359: Improper Control of Generation of Code
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
CVE-2024-48359
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
PT-2024-33091 · Qualitor · Qualitor
Name of the Vulnerable Software and Affected Versions: Qualitor versions 8.24 and below Description: The issue is related to a Server-Side Request Forgery SSRF in the component /request/viewValidacao.php. This allows for an unauthenticated server-side request forgery vulnerability. Recommendation...
CVE-2024-48360: Server-Side Request Forgery (SSRF)
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...
CVE-2024-48359
Qualitor version v8.24 contains a Remote Code Execution (RCE) vulnerability caused by improper control of code generation via the gridValoresPopHidden parameter. This flaw acts as a bypass for the patch for CVE-2023-47253 . An attacker can execute system commands by sending a PHP payload to the p...
CVE-2024-48360
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery SSRF via the component /request/viewValidacao.php...
Qualitor 8.24 Server-Side Request Forgery
CVE-2024-48360 | Qualitor = v8.24 Unauthenticated SSRF Description Qualitor is a platform for business process management, and this system is present in various companies in Brazil that can be identified simply by using Google dorking. Our team identified a vulnerability in the application...
CVE-2024-48359
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
Qualitor 安全漏洞
Qualitor is a managed service process and centralized service platform from Qualitor, Inc. A security vulnerability exists in Qualitor version v8.24, which stems from the gridValoresPopHidden parameter and is vulnerable to remote code execution attacks...
PT-2024-33089 · Qualitor · Qualitor
Name of the Vulnerable Software and Affected Versions: Qualitor version 8.24 Description: The issue is a remote code execution RCE vulnerability. It can be exploited via the gridValoresPopHidden parameter. Recommendations: For Qualitor version 8.24, avoid using the gridValoresPopHidden parameter...
CVE-2024-48360
Qualitor version v8.24 and below is vulnerable to a Server-Side Request Forgery (SSRF) via the /request/viewValidacao.php component. This flaw allows unauthenticated attackers to force the server to make arbitrary requests, potentially leading to the enumeration of internal systems and ports. A p...
Qualitor 安全漏洞
Qualitor is a managed service process and centralized service platform from Qualitor, Inc. A security vulnerability exists in Qualitor version v8.24, which originates from the component /request/viewValidacao.php and is vulnerable to server-side request forgery attacks...