CVE-2023-33761

The CVE relates to eMedia Consulting simpleRedak up to v2.47.23.05, affected by a Reflected Cross-Site Scripting (XSS) vulnerability exploitable via the component /view/cb/format_642.php. The NVD/CNA metrics show a CVSSv3.1 base score of 6.1 (Medium) with Network attack vector, Low impact on conf...

CVE-2023-33762

CVE-2023-33762 affects eMedia Consulting simpleRedak up to v2.47.23.05, with a SQL injection via the Activity parameter. Vulnerable component/versions are confirmed by multiple connected sources. Impact, per CVSS: high confidentiality, integrity, and availability risk (CRITICAL). Exploitation is ...

CVE-2023-33761

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /view/cb/format642.php...

CVE-2023-33762

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a SQL injection vulnerability via the Activity parameter...

CVE-2023-33763

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /scheduler/index.php...

CVE-2023-33762: Improper Neutralization of Special Elements used in an SQL Command

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a SQL injection vulnerability via the Activity parameter...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

Cross site scripting

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

PT-2023-24481 · Emedia Consulting · Simpleredak

Name of the Vulnerable Software and Affected Versions: eMedia Consulting simpleRedak versions up to 2.47.23.05 Description: A stored cross-site scripting XSS issue was found in the component "/de/casting/show/detail/". Recommendations: For versions up to 2.47.23.05, consider restricting access to...

CVE-2023-33764

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /de/casting/show/detail/...

CVE-2023-33764

Vulnerability summary (CVE-2023-33764) : The eMedia Consulting product simpleRedak up to version 2.47.23.05 is affected by a stored Cross-Site Scripting (XSS) vulnerability exposed through the endpoint component/path #/de/casting/show/detail/ . The available connected documents consistently ident...