Lucene search
K

11 matches found

CNVD
CNVD
added 2021/12/30 12:0 a.m.9 views

Amios Emuse-eServices/eNvoice has an unspecified vulnerability

Amios Emuse-eServices/eNvoice is an electronic invoicing service from the Israeli company Amios. It is a digital interface that simplifies the collection process and automatically sends invoices to customers via email. Amios Emuse-eServices/eNvoice suffers from a security vulnerability that stems...

7.5CVSS4.4AI score0.0021EPSS
Exploits0References1
CNVD
CNVD
added 2021/12/30 12:0 a.m.10 views

Amios Emuse-eServices/eNvoice SQL Injection Vulnerability

Amios Emuse-eServices/eNvoice is an electronic invoicing service from the Israeli company Amios. It is a digital interface that simplifies the collection process and automatically sends invoices to customers via email.Amios Emuse-eServices/eNvoice suffers from a SQL injection vulnerability, which...

10CVSS7AI score0.00192EPSS
Exploits0References1
NVD
NVD
added 2021/12/29 3:15 p.m.6 views

CVE-2021-36722

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx...

10CVSS0.00192EPSS
Exploits0References1
NVD
NVD
added 2021/12/29 3:15 p.m.6 views

CVE-2021-36723

Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service...

7.5CVSS0.0021EPSS
Exploits0References1
Prion
Prion
added 2021/12/29 3:15 p.m.8 views

Sql injection

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx...

10CVSS9.8AI score0.00192EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/12/29 2:13 p.m.9 views

CVE-2021-36722 Emuse - eServices / eNvoice SQL injection

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx...

7.1CVSS10AI score0.00192EPSS
Exploits0References1
CVE
CVE
added 2021/12/29 2:13 p.m.41 views

CVE-2021-36722

CVE-2021-36722 affects Emuse - eServices / eNvoice, where an SQL injection vulnerability arises from insufficient input validation. The flaw can enable attackers to bypass login authentication, dump the entire database, or potentially achieve full remote code execution on affected endpoints. The ...

10CVSS8.8AI score0.00192EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/29 2:12 p.m.10 views

CVE-2021-36723 Emuse - eServices / eNvoice Exposure Of Private Personal Information

Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service...

6.1CVSS7.7AI score0.0021EPSS
Exploits0References1
CVE
CVE
added 2021/12/29 2:12 p.m.34 views

CVE-2021-36723

CVE-2021-36723 affects Emuse - eServices / eNvoice (Amios). The connected records describe a vulnerability caused by lack of identification mechanisms and predictable IDs, enabling an attacker to scrape all files and expose private personal information. Public sources (NVD/CNVD/etc.) reiterate ex...

7.5CVSS6.8AI score0.0021EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/29 12:0 a.m.1 views

Amios Emuse - eServices / eNvoice SQL注入漏洞

Amios Emuse-eServices/eNvoice is an electronic invoicing service from the Israeli company Amios. It is a digital interface that simplifies the collection process and automatically sends invoices to customers via email.Amios Emuse-eServices/eNvoice suffers from a SQL injection vulnerability, which...

10CVSS6AI score0.00192EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/12/29 12:0 a.m.2 views

Amios Emuse - eServices/ eNvoice 信息泄露漏洞

Amios Emuse-eServices/eNvoice is an electronic invoicing service from the Israeli company Amios. It is a digital interface that simplifies the collection process and automatically sends invoices to customers via email. Amios Emuse-eServices/eNvoice suffers from a security vulnerability that stems...

7.5CVSS5.7AI score0.0021EPSS
Exploits0References1
Rows per page
Query Builder