156 matches found
Path traversal
In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...
WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)
Software SIS Handball Type Plugin Vulnerable versions = 1.0.45 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41684 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0d7e72427c7d Credits Mika Required privilege...
WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection
Software SIS Handball Type Plugin Vulnerable versions = 1.0.45 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-33924 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 822b04b4b648 Credits Mika Required privilege Administrator Published 23 Ma...
SUSE CVE-2008-3914
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in 1 libclamav/others.c and 2 libclamav/sis.c...
Softing Secure Integration Server v1.22 Remote Code Execution
This module chains two vulnerabilities CVE-2022-1373 and CVE-2022-2334 to achieve authenticated remote code execution against Softing Secure Integration Server v1.22. In CVE-2022-1373, the restore configuration feature is vulnerable to a directory traversal vulnerablity when processing zip files...
CVE-2022-29957
The Emerson DeltaV Distributed Control System DCS through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols include Firmware upgrade 18508/TCP, 18518/TCP; Plug-and-Play 18510/UDP; Hawk services 18507/UDP; Managemen...
CVE-2022-29957
The Emerson DeltaV Distributed Control System DCS through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols include Firmware upgrade 18508/TCP, 18518/TCP; Plug-and-Play 18510/UDP; Hawk services 18507/UDP; Managemen...
Emerson DeltaV Distributed Control System 访问控制错误漏洞
Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson. The system includes features such as network security management, alarm management, batch control, and change management. An access control error vulnerability exists in the Emerson DeltaV Distribut...
Sql injection
An unauthenticated SQL Injection vulnerability in Rosario Student Information System aka rosariosis before 8.1.1 allows remote attackers to execute PostgreSQL statements e.g., SELECT, INSERT, UPDATE, and DELETE through /Side.php via the syear parameter...
SIS-REWE GO 7.5.0/12C Cross Site Scripting Vulnerability
======================================================================= title: Reflected Cross-site Scripting Vulnerabilities product: SIS Informatik - REWE GO vulnerable version: 7.5.0/12C fixed version: 7.7 SP17 CVE number: CVE-2021-31537 impact: Medium homepage:https://sisinformatik.com/rewe-g...
CVE-2021-31537
SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters...
CVE-2021-31537
SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters...
Design/Logic Flaw
SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters...
CVE-2021-31537
The CVE-2021-31537 issue affects SIS Informatik REWE GO prior to version 7.7 SP17, with a reflected XSS in rewe/prod/web/index.php (parameters: config, version, win, db, pwd, user) and rewe/prod/web/rewe_go_check.php (version and other parameters). Nuclei templates confirm the vulnerable paths an...
CVE-2021-31537
SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php affected parameters are config, version, win, db, pwd, and user and /rewe/prod/web/rewegocheck.php version and all other parameters...
SIS-REWE GO 7.5.0/12C Cross Site Scripting
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected Cross-site Scripting Vulnerabilities product: SIS Informatik - REWE GO vulnerable version: 7.5.0/12C fixed version: 7.7 SP17 CVE number: CVE-2021-31537 impact:...
SIS Informatik SIS SIS-REWE Go 跨站脚本漏洞
SIS Informatik SIS-REWE Go is an application from the Austrian company SIS Informatik. An adaptive, branch-independent accounting software for company accounting that provides everything for perfect accounting for industry, trading companies, service providers and authorities. A cross-site...
sis-schwerin.de Cross Site Scripting vulnerability OBB-1349505
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sis-global.com Cross Site Scripting vulnerability OBB-1314377
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Triton Malware Spearheads Latest Attacks on Industrial Systems | McAfee Blogs
ARCHIVED STORY Triton Malware Spearheads Latest Attacks on Industrial Systems Alexandre Mundo · MAR 26, 2020 Malware that attacks industrial control systems ICS, such as the Stuxnet campaign in 2010, is a serious threat. This class of cyber sabotage can spy on, disrupt, or destroy systems that...