EUVD-2019-9286

Malware in sbrugna...

EUVD-2019-9287

Malware in sbrugna...

CVE-2019-19677

arxes-tolina 3.0.0 allows User Enumeration...

CVE-2019-19677

arxes-tolina 3.0.0 allows User Enumeration...

Design/Logic Flaw

arxes-tolina 3.0.0 allows User Enumeration...

CVE-2019-19677

The provided documents confirm CVE-2019-19677 affects arxes-tolina 3.0.0 and results in User Enumeration. The CVE entry consistently states: “arxes-tolina 3.0.0 allows User Enumeration.” Supporting data include NVD records with CVSS 2.0 (4.0) and CVSS 3.1 (4.3) impact scores, indicating potential...

CVE-2019-19677

arxes-tolina 3.0.0 allows User Enumeration...

CVE-2019-19676

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...

CVE-2019-19676

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...

Input validation

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...

CVE-2019-19676

A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other...

CVE-2019-19676

CVE-2019-19676 affects arxes-tolina 3.0.0. The issue is CSV injection: if an attacker supplies data containing formula code in columns Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, or Bemerkung, a malicious user can create a name containing code that may be exploited when the data is saved/ope...