CVE-2024-46655

A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...

CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...

CVE-2024-42760

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...

Ellevo Cross-Site Scripting Vulnerability

Ellevo is an enterprise process-oriented software from Ellevo. A cross-site scripting vulnerability exists in Ellevo version 6.2.0.38160, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary Web...

CVE-2024-46655

A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...

CVE-2024-46655

A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...

PT-2024-32097 · Ellevo · Ellevo

Name of the Vulnerable Software and Affected Versions: Ellevo version 6.2.0.38160 Description: A reflected cross-site scripting XSS vulnerability allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL. This issue enables attackers to execute any...

CVE-2024-46655

A reflected cross-site scripting XSS vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL...

Ellevo 安全漏洞

Ellevo is an enterprise process-oriented software from Ellevo. A cross-site scripting vulnerability exists in Ellevo version 6.2.0.38160, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary Web...

CVE-2024-46655

CVE-2024-46655 concerns Ellevo 6.2.0.38160 and is described as a reflected cross-site scripting (XSS) vulnerability. According to connected sources, the flaw stems from insufficient input filtering/escaping in the application, allowing an attacker to execute arbitrary Web script or HTML in a user...

CVE-2024-42760

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...

CVE-2024-42760

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...

CVE-2024-42760

CVE-2024-42760 affects Ellevo v6.2.0.38160. A SQL Injection vulnerability in the /api/mob/instrucao/conta/destinatarios endpoint could allow a remote attacker to obtain sensitive information. Root cause is a SQL Injection flaw in that API path. The standard impact is exposure of confidential data...

CVE-2024-42760

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...

Ellevo 安全漏洞

Ellevo is an enterprise process-oriented software from Ellevo, Inc. A security vulnerability exists in Ellevo version v.6.2.0.38160. A remote attacker could exploit the vulnerability to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...

PT-2024-30130 · Ellevo · Ellevo

Name of the Vulnerable Software and Affected Versions: Ellevo version 6.2.0.38160 Description: A SQL Injection vulnerability exists in Ellevo version 6.2.0.38160. This allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component. Recommendation...

CVE-2024-42760

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...

CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...

CVE-2024-42759

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint...

Ellevo 安全漏洞

Ellevo is an enterprise process-oriented software from Ellevo, Inc. A security vulnerability exists in Ellevo version 6.2.0.38160, which originates from allowing remote attackers to elevate privileges via the /api/usuario/cadastrodesuplente endpoint...