PT-2025-47299

Name of the Vulnerable Software and Affected Versions WinPlus version 24.11.27 Description A stored Cross-site Scripting XSS issue exists in WinPlus version 24.11.27 due to insufficient validation of user-supplied data. This allows a remote attacker to send a malicious query to an authenticated...

Informática del Este WinPlus 跨站脚本漏洞

Informática del Este WinPlus is a human resource management platform from the Spanish company Informática del Este. A cross-site scripting vulnerability exists in Informática del Este WinPlus version v24.11.27, which stems from insufficient validation of inputs to the parameter descripcion and...

Informática del Este WinPlus 安全漏洞

Informática del Este WinPlus is a human resource management platform from the Spanish company Informática del Este. A security vulnerability exists in Informática del Este WinPlus version v24.11.27, which stems from improper authorization controls and could allow an attacker to impersonate anothe...

Informática del Este WinPlus SQL注入漏洞

Informática del Este WinPlus is a human resource management platform from the Spanish company Informática del Este. An SQL injection vulnerability exists in Informática del Este WinPlus version v24.11.27, which stems from insufficient cleanup and escaping of the parameters val1 and cont, which...

Informática del Este WinPlus 代码问题漏洞

Informática del Este WinPlus is a human resource management platform from the Spanish company Informática del Este. A code issue vulnerability exists in Informática del Este WinPlus version v24.11.27, which stems from an unrestricted upload of a dangerous file type that could lead to an attacker...

PT-2025-47300

Name of the Vulnerable Software and Affected Versions WinPlus version 24.11.27 Description A stored Cross-site Scripting XSS issue exists in WinPlus version 24.11.27 due to insufficient validation of user-supplied data. This allows a remote attacker to send a malicious query to an authenticated...

PT-2025-47298

Name of the Vulnerable Software and Affected Versions WinPlus version 24.11.27 Description A SQL injection issue exists in WinPlus version 24.11.27. This allows an attacker to recover, create, update, and delete databases. The issue is triggered by sending a POST request to the...

Informática del Este WinPlus 跨站脚本漏洞

Informática del Este WinPlus is a human resource management platform from the Spanish company Informática del Este. A cross-site scripting vulnerability exists in Informática del Este WinPlus version v24.11.27, which stems from insufficient validation of inputs to the parameter descripcion and...

PT-2025-47296

Name of the Vulnerable Software and Affected Versions WinPlus version 24.11.27 Description An issue exists in WinPlus that allows for the upload of dangerous file types. An attacker can upload a 'webshell' by sending a POST request to the ''/WinplusPortal/ws/sWinplus.svc/json/uploadfile'' endpoin...

PT-2025-47289

Name of the Vulnerable Software and Affected Versions WinPlus version 24.11.27 Description A flaw exists in authorization controls within WinPlus that permits user impersonation. An attacker can compromise a user’s account by knowing their numerical ID, potentially impacting the confidentiality,...