EUVD-2019-15459

Malware in sbrugna...

Directory traversal

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5891

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application...

CVE-2019-5889

CVE-2019-5889 concerns a log-management directory traversal vulnerability in OverIT Geocall, affecting version 6.3 prior to build 2:346977. The root cause is a failure to properly filter path elements in the log-management component, enabling access to locations outside of a restricted directory....

CVE-2019-5888

OverIT Geocall 6.3 is affected by multiple Cross‑Site Scripting (XSS) vulnerabilities in builds prior to 2:346977. The issue stems from insufficient validation of client‑side data in the WEB application, enabling potential execution of arbitrary script in the context of a user’s browser. Remediat...

CVE-2019-5888

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...