24 matches found
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
EUVD-2021-14841
Malware in sbrugna...
编号撤回
ring is a library by Brian Smith, a personal developer. This CVE number has been withdrawn...
CVE-2020-35775
CITSmart before 9.1.2.23 allows LDAP Injection...
CITSmart ITSM 9.1.2.27 - (query) Time-based Blind SQL Injection (Authenticated) Vulnerability
Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.28 Vendor has...
CITSmart ITSM 9.1.2.22 - LDAP Injection
Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Date: 29/12/2020 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the usernam...
CITSmart ITSM 9.1.2.22 - LDAP Injection Vulnerability
Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the username field of login...
CITSmart ITSM 9.1.2.27 SQL Injection
Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Date: 11/03/2021 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.2...
CITSmart ITSM 9.1.2.22 LDAP Injection
Exploit Title: CITSmart ITSM 9.1.2.22 - LDAP Injection Google Dork: "citsmart.local" Date: 29/12/2020 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.23 Using this LDAP query in the usernam...
CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection (Authenticated)
Exploit Title: CITSmart ITSM 9.1.2.27 - 'query' Time-based Blind SQL Injection Authenticated Google Dork: "citsmart.local" Date: 11/03/2021 Exploit Author: skysbsb Vendor Homepage: https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html Version: = 9.1.2.2...
CITSmart SQL Injection Vulnerability
CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. A SQL injection vulnerability exists in CITSmart versions prior to 9.1.2.28, which stems from the incorrect handling of "filtro de autocomplete...". No details of the vulnerability are...
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
Information disclosure
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
CVE-2021-28142
CVE-2021-28142 affects CITSmart ITSM prior to 9.1.2.28, where the application mishandles the autocomplete filter and allows a SQL injection via the query parameter in the autoCompletePortal path. Multiple connected documents confirm this is a SQL Injection vulnerability (tested as Time-based Blin...
CVE-2021-28142
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."...
CITSmart SQL注入漏洞
CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. A SQL injection vulnerability exists in CITSmart versions prior to 9.1.2.28, which stems from the incorrect handling of "filtro de autocomplete...". No details of the vulnerability are...
CITSmart Injection Vulnerability
CITSmart is an application from CITSmart Portugal. It provides all the processes for designing an organization. An injection vulnerability exists in CITSmart versions prior to 9.1.2.23, which arises from a lack of proper validation of user input data by a networked system or product during the...
CVE-2020-35775
CITSmart before 9.1.2.23 allows LDAP Injection...
CVE-2020-35775
CITSmart before 9.1.2.23 allows LDAP Injection...