552 matches found
CVE-2023-27779
AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...
AM System AM Presencia SQL注入漏洞
AM System AM Presencia is an application of the Spanish company AM System. It is used to control the presence and accelerate the realization of employees in the control terminal. A security vulnerability exists in AM System AM Presencia version v3.7.3, which stems from the discovery of the...
CVE-2023-27779
AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...
CVE-2023-27779: Improper Neutralization of Special Elements used in an SQL Command
AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...
CVE-2023-27779
CVE-2023-27779 affects AM Presencia v3.7.3. A SQL injection vulnerability exists in the login form, triggered via the user parameter, with potential impact on confidentiality, integrity, and availability as indicated by CVSS 3.1 (base score 9.8). The connected documents confirm the vulnerability ...
CVE-2023-27779
AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...
PT-2023-21343
Name of the Vulnerable Software and Affected Versions AM Presencia version 3.7.3 Description A SQL injection issue was found in the login form via the user parameter. This allows for potential exploitation. Recommendations For AM Presencia version 3.7.3, consider restricting access to the login...
spielewelt-am-see.de Cross Site Scripting vulnerability OBB-3258137
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
schule-am-auetal.de Cross Site Scripting vulnerability OBB-3241676
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bernau-am-chiemsee.de Cross Site Scripting vulnerability OBB-3180268
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: IBM Synthetic Playback Agent is vulnerable due to its use of Apache Commons Text [CVE-2022-42889]
Summary Synthetic Playback Agent version 8.1.4 IF17 has addressed the following vulnerability: CVE-2022-42889 Vulnerability Details CVEID:CVE-2022-42889 DESCRIPTION: Apache Commons Text could allow a remote attacker to execute arbitrary code on the system, caused by an insecure interpolation...
wohnen-am-muelbach.de Cross Site Scripting vulnerability OBB-3079090
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
am-yuridicheskaya-firma.promportal.su Cross Site Scripting vulnerability OBB-3067022
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-27424 · Unknown · Cbrn-Analysis
Name of the Vulnerable Software and Affected Versions: CBRN-Analysis versions prior to 22 Description: The issue allows XXE attacks via an XML document, leading to NTLMv2-SSP hash disclosure. This occurs when processing a malicious XML document. Recommendations: For versions prior to 22, update t...
CVE-2022-45194: Improper Restriction of XML External Entity Reference
CBRN-Analysis before 22 allows XXE attacks via am mws XML document, leading to NTLMv2-SSP hash disclosure...
theater-am-park.de Cross Site Scripting vulnerability OBB-3036142
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
logopaedie-am-niederrhein.de Cross Site Scripting vulnerability OBB-3034135
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-44586
Auth. admin+ Stored Cross-Site Scripting XSS in Ayoub Media AM-HiLi plugin = 1.0 on WordPress...