8 matches found
CVE-2019-12734
SiteVision 4 has Incorrect Access Control...
EUVD-2019-4323
Malware in sbrugna...
CVE-2019-12733
SiteVision 4 allows Remote Code Execution...
CVE-2019-12734
SiteVision 4 has Incorrect Access Control...
CVE-2019-12733
SiteVision 4 allows Remote Code Execution...
Remote code execution
SiteVision 4 allows Remote Code Execution...
Improper access control
SiteVision 4 has Incorrect Access Control...
CVE-2019-12734
SiteVision 4.x/5.x suffers from Insufficient Module Access Control (CVE-2019-12734). A low-privilege user (e.g., Editor) can inject or edit script modules during page edits, enabling Cross‑Site Scripting and in some descriptions Remote Code Execution. Affected versions: SiteVision 4 up to 4.5.6 a...