35 matches found
CVE-2024-45241
POC - CVE-2024-45241: CentralSquare CryWolf의 경로 탐색 취약점 개요 CVE 식별자: CVE-2024-45241 제품: CentralSquare CryWolf 오경보 관리 영향을 받는 구성 요소: GeneralDocs.aspx 취약점 유형: 경로 탐색 발견 날짜: 2024-08-09 설명 오경보 관리 시스템인 CentralSquare CryWolf의 GeneralDocs.aspx 구성 요소에서 경로 탐색 취약점이 확인되었습니다. 이 취약점으로 인해 인증되지 않은 공격자가 rpt 매개변수를 악용...
CVE-2023-40362
CVE-2023-40362 CVE-2023-40362 脆弱性の詳細と概念実証。 概要 Click2Gov BPのURI /Click2GovBP/mastercontractorlist.htmlにおけるアクセス制御の脆弱性により、認証済みユーザーが被害者のユーザーIDと削除対象の契約業者の情報を用いて、他のユーザーのアカウントから契約業者を削除できるようになります。 これは、指定されたユーザーIDのアカウントから契約業者を削除する権限がユーザーにあるかどうかをWebアプリケーションが検証しないことに起因します。 ベンダー : CentralSquare 報告者 : Ally...
CVE-2023-40362
An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protections allows remote attackers to arbitrarily delete the contractors from any user's account when the user ID and contractor information is known...
CVE-2025-64280
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...
CVE-2025-64281
An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...
EUVD-2025-131924
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
CVE-2025-59491
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
CVE-2025-59491
Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...
CVE-2025-64281
An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...
CVE-2025-64281
An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...
CVE-2025-64280
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...
CVE-2025-64280
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...
CentralSquare Community Development 安全漏洞
CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7 that stems from unfiltered input in the permitno field, which could lead to an SQL...
CVE-2025-64280
A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...
PT-2025-46672
Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description An authentication bypass issue exists in CentralSquare Community Development 19.5.7, allowing unauthorized access to the admin panel without requiring administrative credentials. T...
PT-2025-46671
Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description A SQL Injection issue exists in CentralSquare Community Development 19.5.7. Attackers can inject SQL code through the permit no field. Recommendations Update to a newer version tha...
CVE-2025-64281
An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...
CentralSquare Community Development 安全漏洞
CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7, which stems from an authentication bypass that could result in unauthorized acces...
CVE-2025-64281
CVE-2025-64281 describes an authentication bypass in CentralSquare Community Development version 19.5.7 that allows attackers to access the admin panel without admin credentials. The connected sources confirm the affected product and version, the issue is labeled as a high-impact vulnerability (C...