CVE-2025-5178 Realce Tecnologia Queue Ticket Kiosk Image File ajax.php unrestricted upload

A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected is an unknown function of the file /adm/ajax.php of the component Image File Handler. The manipulation of the argument files leads to unrestricted upload. It is possible to launc...

CVE-2025-5178

The CVE-2025-5178 entry concerns Realce Tecnologia Queue Ticket Kiosk, specifically the Image File Handler component. Affected is an unknown function in the file /adm/ajax.php where the files[] argument can be manipulated to achieve unrestricted upload, enabling remote exploitation. Public docume...

CVE-2025-5177 Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php cross site scripting

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This issue affects some unknown processing of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to cross site scripting. The...

CVE-2025-5177

The CVE-2025-5177 entry concerns Realce Tecnologia Queue Ticket Kiosk (Admin Login Page). Affected component is the Admin Login Page, specifically the /adm/index.php path, where manipulating the Usuário parameter enables a cross-site scripting vulnerability. The issue is described as remotely ini...

CVE-2025-5177 Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php cross site scripting

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This issue affects some unknown processing of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to cross site scripting. The...

CVE-2025-5176

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to sql injection. The attack can...

CVE-2025-5176

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to sql injection. The attack can...

CVE-2025-5176

CVE-2025-5176 affects Realce Tecnologia Queue Ticket Kiosk (up to 20250517). The vulnerability is an SQL injection in the Admin Login Page, targeting the file /adm/index.php via the argument Usuário. Impact: high confidentiality/integrity risk per CVSS details; vector is network with low attack c...

CVE-2025-5176 Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php sql injection

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to sql injection. The attack can...

CVE-2025-5176 Realce Tecnologia Queue Ticket Kiosk Admin Login Page index.php sql injection

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to sql injection. The attack can...

Realce Tecnologia Queue Ticket Kiosk: Code-related vulnerabilities

Realce Tecnologia Queue Ticket Kiosk is a queue management software from Realce Tecnologia. A code issue vulnerability exists in Realce Tecnologia Queue Ticket Kiosk 20250517 and prior versions, which stems from an unrestricted upload due to the parameter files operation...

A Framework for Combined Transaction Posting and Pricing for Layer 2 Blockchains

This paper presents a comprehensive framework for transaction posting and pricing in Layer 2 L2 blockchain systems, focusing on challenges stemming from fluctuating Layer 1 L1 gas fees and the congestion issues within L2 networks. Existing methods have focused on the problem of optimal posting...

PT-2025-22920 · Realce Tecnologia · Realce Tecnologia Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk up to 20250517 Description: A critical vulnerability has been found in the Image File Handler component of the affected software, specifically in an unknown function of the file /adm/ajax.php. The...

CVE-2025-5178: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected is an unknown function of the file /adm/ajax.php of the component Image File Handler. The manipulation of the argument files leads to unrestricted upload. It is possible to launc...

PT-2025-22919 · Realce Tecnologia · Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk up to 20250517 Description: A vulnerability was found in the Admin Login Page component, specifically affecting the /adm/index.php file. The manipulation of the Usuário argument leads to cross-site...

PT-2025-22921 · Realce Tecnologia · Realce Tecnologia Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk up to 20250517 Description: A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk, affecting an unknown functionality of the file /adm/index.php of the component Cadastro de Administrador Page...

PT-2025-22918 · Realce Tecnologia · Queue Ticket Kiosk

Name of the Vulnerable Software and Affected Versions: Realce Tecnologia Queue Ticket Kiosk versions up to 20250517 Description: A critical vulnerability affects the unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to SQL...

CVE-2025-5176: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affects unknown code of the file /adm/index.php of the component Admin Login Page. The manipulation of the argument Usuário leads to sql injection. The attack can...

CVE-2025-5179: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected by this vulnerability is an unknown functionality of the file /adm/index.php of the component Cadastro de Administrador Page. The manipulation of the argument Name/Usuário leads to...

Realce Tecnologia Queue Ticket Kiosk Injection Vulnerability

Realce Tecnologia Queue Ticket Kiosk is a queue management software from Realce Tecnologia. An injection vulnerability exists in Realce Tecnologia Queue Ticket Kiosk 20250517 and earlier versions, which stems from a parameter Usuário operation that results in SQL injection...