EUVD-2019-11475

Malware in sbrugna...

CVE-2019-25022

An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime.exec without validation...

Scytl sVote Injection Vulnerability

Scytl sVote is a Spanish Scytl open source application. Provides voters to vote online. Scytl sVote 2.1 suffers from an injection vulnerability that can be exploited by an attacker to inject code for execution by creating an election event and injecting a payload on the event alias...

CVE-2019-25022

An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime.exec without validation...

CVE-2019-25022

An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime.exec without validation...

Input validation

An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime.exec without validation...

CVE-2019-25022

An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime.exec without validation...

CVE-2019-25022: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime.exec without validation...

PT-2021-9090

Name of the Vulnerable Software and Affected Versions Scytl sVote version 2.1 Description An issue was discovered in Scytl sVote where an attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias. This is possible because the application...

CVE-2018-6583

SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request...

PT-2018-17647

Name of the Vulnerable Software and Affected Versions Joomla! Timetable Responsive Schedule version 1.5 Description A SQL Injection issue exists in the Timetable Responsive Schedule component for Joomla!, which can be exploited via a view=event&alias= request. Recommendations For version 1.5,...