EUVD-2019-9287

Malware in sbrugna...

EUVD-2019-9286

Malware in sbrugna...

CVE-2019-19677

arxes-tolina 3.0.0 allows User Enumeration...

CVE-2019-19677

arxes-tolina 3.0.0 allows User Enumeration...

Design/Logic Flaw

arxes-tolina 3.0.0 allows User Enumeration...

CVE-2019-19677

The provided documents confirm CVE-2019-19677 affects arxes-tolina 3.0.0 and results in User Enumeration. The CVE entry consistently states: “arxes-tolina 3.0.0 allows User Enumeration.” Supporting data include NVD records with CVSS 2.0 (4.0) and CVSS 3.1 (4.3) impact scores, indicating potential...

CVE-2019-19677

arxes-tolina 3.0.0 allows User Enumeration...

CVE-2019-19676

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...

CVE-2019-19676

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...

Input validation

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...

CVE-2019-19676

CVE-2019-19676 affects arxes-tolina 3.0.0. The issue is CSV injection: if an attacker supplies data containing formula code in columns Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, or Bemerkung, a malicious user can create a name containing code that may be exploited when the data is saved/ope...

CVE-2019-19676

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...

PT-2020-10218

Name of the Vulnerable Software and Affected Versions arxes-tolina version 3.0.0 Description A CSV injection issue allows malicious users to gain remote control of other computers by entering formula code in specific columns, including Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkun...

PT-2020-10219

Name of the Vulnerable Software and Affected Versions arxes-tolina version 3.0.0 Description The issue allows user enumeration. Recommendations For arxes-tolina version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2019-19677: Exposure of Sensitive Information to an Unauthorized Actor

arxes-tolina 3.0.0 allows User Enumeration...

CVE-2019-19676: Improper Neutralization of Formula Elements in a CSV File

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...