46 matches found
CVE-2022-22834
CVE-2022-22834 (OverIT Geocall) : The vulnerability exists in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can trigger an XSLT Injection, which could lead to remote code execution. Multiple connected sources (including NVD and ...
CVE-2022-22834
An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution...
CVE-2022-22834: XML Injection (aka Blind XPath Injection)
An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution...
PT-2022-15702
Name of the Vulnerable Software and Affected Versions OverIT Geocall versions prior to 8.0 Description An issue was discovered that allows an authenticated user with the Test Trasformazione XSL functionality enabled to exploit a XSLT Injection vulnerability. This could allow attackers to achieve...
PT-2021-21694
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management XML Forms versions 7.10, 7.11, 7.30, 7.31, 7.40, 7.50 Description The issue allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level...
