3 matches found
CVE-2022-36534: Undefined Security Weakness
Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote code execution RCE vulnerabilities via the JobExecuteBefore and JobExecuteAfter parameters at postprofilesettings.php...
CVE-2022-36536: Use of Insufficiently Random Values
An issue in the component postapplogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below allows attackers to escalate privileges via creating crafted session tokens...
PT-2022-23452
Name of the Vulnerable Software and Affected Versions Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux versions 9.47x and below Description A cross-site scripting XSS issue was discovered. This type of issue occurs when an application includes user input in its output without proper...