Authentication flaw

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...

CVE-2023-25913 Authentication Bypass in Danfoss AK-SM800A

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...

PT-2023-20358 · Danfoss · Ak-Sm800A +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an authentication flaw that allows an attacker to generate a web report, potentially disclosing sensitive information such as...

CVE-2023-3045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tise Technology Parking Web Report allows SQL Injection. This issue affects Parking Web Report: before 2.1...

CVE-2023-3045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tise Technology Parking Web Report allows SQL Injection. This issue affects Parking Web Report: before 2.1...

CVE-2023-3045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tise Technology Parking Web Report allows SQL Injection.This issue affects Parking Web Report: before 2.1...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tise Technology Parking Web Report allows SQL Injection.This issue affects Parking Web Report: before 2.1...

CVE-2023-3045 SQLi in Tise Technology's Parking Web Report

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tise Technology Parking Web Report allows SQL Injection. This issue affects Parking Web Report: before 2.1...

CVE-2023-3045 SQLi in Tise Technology's Parking Web Report

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tise Technology Parking Web Report allows SQL Injection. This issue affects Parking Web Report: before 2.1...

CVE-2023-3045

CVE-2023-3045 describes an SQL Injection in Tise Technology’s Parking Web Report, caused by improper neutralization of special elements in SQL commands. The vulnerability affects Parking Web Report: before 2.1, with CVSS 3.1 base score 9.8 (CRITICAL) and impact on confidentiality, integrity, and ...

PT-2023-22696

Name of the Vulnerable Software and Affected Versions Tise Technology Parking Web Report versions prior to 2.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2023-1051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in As Koc Energy Web Report System allows Reflected XSS.This issue affects Web Report System: before 23.03.10...

CVE-2023-1051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in As Koc Energy Web Report System allows Reflected XSS. This issue affects Web Report System: before 23.03.10...

CVE-2023-1050

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in As Koc Energy Web Report System allows SQL Injection. This issue affects Web Report System: before 23.03.10...

CVE-2023-1050

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in As Koc Energy Web Report System allows SQL Injection.This issue affects Web Report System: before 23.03.10...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in As Koc Energy Web Report System allows Reflected XSS.This issue affects Web Report System: before 23.03.10...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in As Koc Energy Web Report System allows SQL Injection.This issue affects Web Report System: before 23.03.10...

CVE-2023-1051 XSS in As Koc Web Report System

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in As Koc Energy Web Report System allows Reflected XSS. This issue affects Web Report System: before 23.03.10...

CVE-2023-1051 XSS in As Koc Web Report System

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in As Koc Energy Web Report System allows Reflected XSS. This issue affects Web Report System: before 23.03.10...

CVE-2023-1051

CVE-2023-1051 describes a reflected Cross-site Scripting vulnerability in the As Koc Energy Web Report System, due to improper neutralization of input during web page generation. Affected versions are prior to 23.03.10. The in-document sources consistently identify the issue as a Cross-site Scrip...