CVE-2023-41638

CVE-2023-41638 affects GruppoSCAI RealGimm 1.1.37p38, specifically the Gestione Documentale module. The vulnerability is an arbitrary file upload that permits remote code execution via uploading a crafted file. CVSS 3.1 metrics indicate NETWORK attack vector, LOW attack complexity, LOW privileges...

CVE-2023-41636

CVE-2023-41636 describes a SQL injection in the parameters of GruppoSCAI RealGimm v1.1.37p38, specifically the Data Richiesta dal parameter. The vulnerability allows an attacker to access the database and execute arbitrary commands through a crafted SQL query. Affected software: GruppoSCAI RealGi...

GruppoSCAI RealGimm 代码问题漏洞

GruppoSCAI RealGimm is a management solution for large property and real estate assets from SCAI. A security vulnerability exists in GruppoSCAI RealGimm version 1.1.37p38, which stems from the presence of an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code by...

CVE-2023-41642

CVE-2023-41642 affects GruppoSCAI RealGimm 1.1.37p38 and its ErroreNonGestito.aspx component. The issue is multiple reflected XSS vulnerabilities that allow an attacker to inject arbitrary JavaScript into a victim’s browser by crafting a payload in the VIEWSTATE parameter. Root cause is improper ...