CVE-2021-28142

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...

EUVD-2021-14841

Malware in sbrugna...

Number withdrawal

ring is a library by Brian Smith, a personal developer. This CVE number has been withdrawn...

CVE-2020-35775

CITSmart before 9.1.2.23 allows LDAP Injection...

CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)

Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Date: 11/03/2021 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.2...

CITSmart ITSM 9.1.2.22 - LDAP Injection

Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Date: 29/12/2020 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the usernam...

CITSmart ITSM 9.1.2.27 SQL Injection

Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Date: 11/03/2021 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.2...

CITSmart ITSM 9.1.2.22 - LDAP Injection Vulnerability

Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the username field of login...

CITSmart ITSM 9.1.2.27 - (query) Time-based Blind SQL Injection (Authenticated) Vulnerability

Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.28 Vendor has...

CITSmart ITSM 9.1.2.22 LDAP Injection

Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Date: 29/12/2020 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the usernam...

CITSmart SQL Injection Vulnerability

CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. A SQL injection vulnerability exists in CITSmart versions prior to 9.1.2.28, which stems from the incorrect handling of "filtro de autocomplete...". No details of the vulnerability are...

CVE-2021-28142

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...

CVE-2021-28142

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...

CVE-2021-28142

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...

Information disclosure

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...

CVE-2021-28142

CVE-2021-28142 affects CITSmart ITSM prior to 9.1.2.28, where the application mishandles the autocomplete filter and allows a SQL injection via the query parameter in the autoCompletePortal path. Multiple connected documents confirm this is a SQL Injection vulnerability (tested as Time-based Blin...

CVE-2021-28142

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...

CITSmart SQL Injection Vulnerability

CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. A SQL injection vulnerability exists in CITSmart versions prior to 9.1.2.28, which stems from the incorrect handling of "filtro de autocomplete...". No details of the vulnerability are...

CVE-2021-28142: Improper Neutralization of Special Elements used in an SQL Command

CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...

PT-2021-17768

Name of the Vulnerable Software and Affected Versions: CITSmart versions prior to 9.1.2.28 Description: The issue is related to the mishandling of the filtro de autocomplete feature. Recommendations: For versions prior to 9.1.2.28, update to version 9.1.2.28 or later to resolve the issue...