CVE-2023-36361

CVE-2023-36361 affects Audimexee v14.1.7, with a SQL injection vulnerability exploitable through the p_table_name parameter. The root cause is improper handling/sanitization of the p_table_name input, enabling attackers to inject SQL commands. Documented impact is high confidentiality, integrity,...

PT-2023-25549 · Audimexee · Audimexee

Name of the Vulnerable Software and Affected Versions: Audimexee version 14.1.7 Description: The issue is a SQL injection vulnerability that can be exploited via the p table name parameter. This allows an attacker to inject malicious SQL code, potentially leading to unauthorized access or...

CVE-2023-36361

Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the ptablename parameter...

CVE-2023-36361

Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the ptablename parameter...

CVE-2023-39559

AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39559

AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...

CVE-2023-39559

AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

Cross site scripting

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

Path traversal

AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...

CVE-2023-39558

Summary: CVE-2023-39558 affects AudimexEE v15.0 with multiple reflected cross-site scripting (XSS) vulnerabilities in the Show Kai Data component. What is affected: AudimexEE version 15.0; vulnerable code path is the Show Kai Data component that reflects input back to the user. Impact (per source...

Audimex AG AudimexEE 跨站脚本漏洞

Audimex AG AudimexEE is a system for audit management from Audimex Ag, Germany. The system meets complex audit processes around a company's business, supports customization for use and is deployed platform-independently. A security vulnerability exists in Audimex AG AudimexEE v15.0, which is caus...

CVE-2023-39559

AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...

PT-2023-27020 · Audimexee · Audimexee

Name of the Vulnerable Software and Affected Versions: AudimexEE version 15.0 Description: A full path disclosure issue was discovered. This means that the software may reveal the full path of files or directories on the server, potentially allowing attackers to gather sensitive information about...

CVE-2023-39559

AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...

CVE-2023-39558

AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...

CVE-2023-39559

CVE-2023-39559 affects AudimexEE 15.0 and is described as a full path disclosure (path traversal) vulnerability. The available sources confirm the issue but do not provide a concrete root cause or affected components beyond AudimexEE 15.0; CVSS v3.1 base score is 5.3 (Medium) with Confidentiality...

Audimex AG AudimexEE 路径遍历漏洞

Audimex AG AudimexEE is a system for audit management from Audimex Ag, Germany. The system meets complex audit processes around a company's business, supports customization for use and is deployed platform-independently. A security vulnerability exists in Audimex AG AudimexEE v15.0, which contain...