CVE-2023-42245

Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via monitor/sscheduledfile.php...

Selesta Visual Access Manager 安全漏洞

Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in the Selesta Visual Access Manager vamvisits.php file, no details of the vulnerability are available at this time...

CVE-2023-42241

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vamanagraphic.php...

CVE-2023-42242

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/sterminal.php...

PT-2025-1463 · Selesta · Selesta Visual Access Manager

Name of the Vulnerable Software and Affected Versions: Selesta Visual Access Manager VAM versions prior to 4.42.2 Description: An issue was discovered in Selesta Visual Access Manager VAM where an authenticated attacker can perform SQL Injection in multiple GET parameters of "/vam/vam i...

CVE-2023-42242

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/sterminal.php...

CVE-2023-42243

In Selesta Visual Access Manager 4.42.2, an authenticated user can access the administrative page /common/vamSql.php, which allows for arbitrary SQL queries...

PT-2025-1464 · Selesta · Selesta Visual Access Manager

Name of the Vulnerable Software and Affected Versions: Selesta Visual Access Manager VAM versions prior to 4.42.2 Description: An issue was discovered in Selesta Visual Access Manager VAM where an authenticated attacker can perform SQL Injection in multiple POST parameters of the "/vam/vam eps.ph...

CVE-2023-42245

Selesta Visual Access Manager versions prior to 4.42.2 are vulnerable to a Cross Site Scripting (XSS) vulnerability via the monitor/s_scheduledfile.php endpoint. This flaw stems from the improper neutralization of input during web page generation, potentially allowing for the injection of malicio...

CVE-2023-42249

Selesta Visual Access Manager versions prior to 4.42.2 are vulnerable to a Cross Site Scripting (XSS) vulnerability located in the vam/vam_visits.php file. The root cause is the improper neutralization of input during web page generation. This vulnerability could allow an attacker to steal user d...

CVE-2023-42243

Selesta Visual Access Manager versions prior to 4.42.2 are vulnerable to a SQL injection vulnerability. The root cause is a lack of validation for externally entered SQL statements within the administrative page /common/vam_Sql.php . An authenticated user can exploit this flaw to perform arbitrar...

Selesta Visual Access Manager 安全漏洞

Selesta Visual Access Manager is a visual access manager from Selesta. A SQL injection vulnerability exists in Selesta Visual Access Manager, which can be exploited by an attacker to perform SQL injection in the POST parameter of /vam/vameps.php...

CVE-2023-42236

An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . The root cause is a lack of validation of the GET parameter in the /common/ajaxfunction.php endpoint against externally entered SQL statements. An authenticated attacker can exploit this flaw t...

CVE-2023-42235

Selesta Visual Access Manager (VAM) versions prior to 4.42.2 are vulnerable to an SQL Injection flaw. An authenticated attacker can exploit multiple parameters within the /monitor/s_normalizedtrans.php API endpoint. To remediate this issue, users should update to version 4.42.2 or later. As a tem...

CVE-2023-42239

An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . The root cause is a lack of validation for externally entered SQL statements, allowing an authenticated attacker to perform SQL injection via multiple POST parameters of the /vam/vam_ep.php API...

CVE-2023-42240

An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . An authenticated attacker can exploit this flaw by targeting multiple POST parameters of the /monitor/s_scheduledfile.php endpoint. While the technical impact is noted as partial , the vulnerab...

CVE-2023-42241

An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . An authenticated attacker can exploit this flaw by targeting multiple POST parameters within the /vam/vam_anagraphic.php endpoint. Successful exploitation may allow for data manipulation . To r...

CVE-2023-42246

Selesta Visual Access Manager versions prior to 4.42.2 are vulnerable to a Cross Site Scripting (XSS) vulnerability located in the /vam/vam_ep.php API endpoint. This flaw allows for the injection of malicious scripts into the website, which could potentially lead to unauthorized access or adminis...

CVE-2023-42247

Selesta Visual Access Manager versions prior to 4.42.2 are vulnerable to a Cross Site Scripting (XSS) vulnerability within the monitor/s_monitor_map.php endpoint. The root cause is a lack of effective filtering and escaping of user-supplied data, which could allow for the execution of malicious s...

CVE-2023-42244

An authenticated attacker can perform SQL Injection in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . The vulnerability exists because the application fails to properly validate externally entered SQL statements within multiple POST parameters of the /vam/vam_visits.php API endpoi...