27 matches found
CVE-2024-46655
A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...
CVE-2024-42759
An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...
CVE-2024-42760
SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...
Ellevo Cross-Site Scripting Vulnerability
Ellevo is an enterprise process-oriented software from Ellevo. A cross-site scripting vulnerability exists in Ellevo version 6.2.0.38160, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary Web...
CVE-2024-46655
A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...
CVE-2024-46655
A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...
CVE-2024-46655
A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...
PT-2024-32097 · Ellevo · Ellevo
Name of the Vulnerable Software and Affected Versions: Ellevo version 6.2.0.38160 Description: A reflected cross-site scripting XSS vulnerability allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL. This issue enables attackers to execute any...
CVE-2024-46655
CVE-2024-46655 concerns Ellevo 6.2.0.38160 and is described as a reflected cross-site scripting (XSS) vulnerability. According to connected sources, the flaw stems from insufficient input filtering/escaping in the application, allowing an attacker to execute arbitrary Web script or HTML in a user...
Ellevo security vulnerabilities
Ellevo is an enterprise process-oriented software from Ellevo. A cross-site scripting vulnerability exists in Ellevo version 6.2.0.38160, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary Web...
CVE-2024-46655: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...
CVE-2024-42760
SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...
CVE-2024-42760
SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...
Ellevo security vulnerabilities
Ellevo is an enterprise process-oriented software from Ellevo, Inc. A security vulnerability exists in Ellevo version v.6.2.0.38160. A remote attacker could exploit the vulnerability to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...
CVE-2024-42760
A SQL Injection vulnerability exists in Ellevo version v.6.2.0.38160 . A remote attacker can exploit this flaw to obtain sensitive information by targeting the /api/mob/instrucao/conta/destinatarios component. While the vulnerability has been sighted in the wild, no specific exploit links are pro...
CVE-2024-42760: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...
CVE-2024-42760
SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...
PT-2024-30130 · Ellevo · Ellevo
Name of the Vulnerable Software and Affected Versions: Ellevo version 6.2.0.38160 Description: A SQL Injection vulnerability exists in Ellevo version 6.2.0.38160. This allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component. Recommendation...
