Control iD Gerencia Web 安全漏洞

Control iD Gerencia Web is an application from Control iD. A security vulnerability exists in Control iD Gerencia Web version 1.30, which stems from an issue with the explicit storage of sensitive information in the component Cookie Handler...

CVE-2023-4392: Cleartext Storage of Sensitive Information

A vulnerability was found in Control iD Gerencia Web 1.30 and classified as problematic. Affected by this issue is some unknown functionality of the component Cookie Handler. The manipulation leads to cleartext storage of sensitive information. The attack may be launched remotely. The complexity ...

CVE-2023-4384

A vulnerability has been found in MaximaTech Portal Executivo 21.9.1.140 and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to missing encryption of sensitive data. The attack can be initiated remotely. The complexity of ...

CVE-2023-4384

A vulnerability has been found in MaximaTech Portal Executivo 21.9.1.140 and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to missing encryption of sensitive data. The attack can be initiated remotely. The complexity of ...

Design/Logic Flaw

A vulnerability has been found in MaximaTech Portal Executivo 21.9.1.140 and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to missing encryption of sensitive data. The attack can be initiated remotely. The complexity of ...

CVE-2023-4384 MaximaTech Portal Executivo Cookie missing encryption

A vulnerability has been found in MaximaTech Portal Executivo 21.9.1.140 and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to missing encryption of sensitive data. The attack can be initiated remotely. The complexity of ...

PT-2023-29010 · Maximatech · Maximatech Portal Executivo

Name of the Vulnerable Software and Affected Versions: MaximaTech Portal Executivo version 21.9.1.140 Description: A vulnerability has been found in the Cookie Handler component, leading to missing encryption of sensitive data. The attack can be initiated remotely, with a rather high complexity a...

CVE-2023-4384: Missing Encryption of Sensitive Data

A vulnerability has been found in MaximaTech Portal Executivo 21.9.1.140 and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to missing encryption of sensitive data. The attack can be initiated remotely. The complexity of ...

MaximaTech Portal Executivo 安全漏洞

MaximaTech Portal Executivo is a portal system from MaximaTech, Inc. A security vulnerability exists in MaximaTech Portal Executivo version 21.9.1.140, which stems from a sensitive information disclosure vulnerability in the component Cookie Handler...

PT-2023-29042 · Unknown · Control Id Gerencia Web

Name of the Vulnerable Software and Affected Versions: Control iD Gerencia Web version 1.30 Description: A vulnerability was found in the component Cookie Handler, leading to cleartext storage of sensitive information. The attack may be launched remotely, with a rather high complexity and difficu...

CVE-2023-1151

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql...

CVE-2023-1151

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql...

Sql injection

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql...

CVE-2023-1151 SourceCodester Electronic Medical Records System Cookie administrator.php sql injection

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql...

PT-2023-16783 · Sourcecodester · Sourcecodester Electronic Medical Records System

Name of the Vulnerable Software and Affected Versions: SourceCodester Electronic Medical Records System version 1.0 Description: A critical issue has been found in the Cookie Handler component of the SourceCodester Electronic Medical Records System, specifically in the file administrator.php. The...

CVE-2023-1151: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql...

CVE-2022-4890

A vulnerability, which was classified as critical, has been found in abhilash1985 PredictApp. This issue affects some unknown processing of the file config/initializers/newframeworkdefaults70.rb of the component Cookie Handler. The manipulation leads to deserialization. The attack may be initiate...

Deserialization of untrusted data

A vulnerability, which was classified as critical, has been found in abhilash1985 PredictApp. This issue affects some unknown processing of the file config/initializers/newframeworkdefaults70.rb of the component Cookie Handler. The manipulation leads to deserialization. The attack may be initiate...

CVE-2022-4890 abhilash1985 PredictApp Cookie new_framework_defaults_7_0.rb deserialization

A vulnerability, which was classified as critical, has been found in abhilash1985 PredictApp. This issue affects some unknown processing of the file config/initializers/newframeworkdefaults70.rb of the component Cookie Handler. The manipulation leads to deserialization. The attack may be initiate...

CVE-2022-4890

CVE-2022-4890 affects the abhilash1985 PredictApp Cookie Handler. The vulnerability arises from deserialization caused by processing in config/initializers/new_framework_defaults_7_0.rb, enabling a remote attack. The issue is deemed critical (NVD CVSSv3.1 base score 9.8) with high impact on confi...