CVE-2024-37773

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-37775

Sunbird DCIM dcTrack v9.1.2 is affected by an incorrect access control vulnerability. This flaw allows an attacker to create or update a ticket with a location that bypasses Role-Based Access Control (RBAC) checks. This bypass could allow unauthorized modification of tickets. As a temporary worka...

CVE-2024-37776

A cross-site scripting (XSS) vulnerability exists in Sunbird DCIM dcTrack v9.1.2 . This flaw allows an attacker to execute arbitrary web scripts or HTML by providing a crafted payload through certain admin screens . The underlying cause is the improper neutralization of input during web page gene...

CVE-2024-37776

A cross-site scripting XSS vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens...

CVE-2024-37773

Sunbird DCIM dcTrack version 9.1.2 is affected by an HTML injection vulnerability. An attacker authenticated as an administrator can inject arbitrary HTML code into an admin screen. While the vulnerability allows for unauthorized content injection, specific details regarding the underlying techni...

Sunbird DCIM dcTrack 安全漏洞

Sunbird DCIM dcTrack is an asset monitoring management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2 that stems from the presence of cross-site request forgery CSRF, which allows an authenticated attacker to elevate the privileges of an...

CVE-2024-37773: Improper Control of Generation of Code

An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...

CVE-2024-37776: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens...

CVE-2024-37774: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens...

CVE-2024-37775: Incorrect Authorization

Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC check...

Sunbird DCIM dcTrack 安全漏洞

Sunbird DCIM dcTrack is an asset monitoring management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML via ...

CVE-2024-37775

Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC check...

CVE-2024-37776

A cross-site scripting XSS vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens...

CVE-2024-37774

A Cross-Site Request Forgery CSRF in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens...

PT-2024-27744 · Sunbird Dcim · Dctrack

Name of the Vulnerable Software and Affected Versions: Sunbird DCIM dcTrack version 9.1.2 Description: A Cross-Site Request Forgery CSRF issue allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens. This can...