44 matches found
Cartadis Gespage 8.2.1 - Directory Traversal
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. id: CVE-2021-33807 info: name: Cartadis Gespage 8.2.1 - Directory Traversal author: daffainfo severity: high description: Cartadis Gespage through 8.2.1 allows Directory Traversa...
Cartadis Gespage 8.2.1 - Directory Traversal Detection
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. !/usr/bin/env python3 -- coding: utf-8 -- """Cartadis Gespage through 8.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
Gespage Login Panel - Detect
Gespage login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Gespage login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Gespage Login Panel - Detect', 'description': 'Gespage...
CVE-2021-33807
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...
EUVD-2017-16968
Malware in sbrugna...
EUVD-2018-20746
Malware in sbrugna...
CVE-2021-33807
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...
CVE-2021-33807
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...
CVE-2021-33807
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...
Directory traversal
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...
CVE-2021-33807
Cartadis Gespage 8.2.1 contains a Directory Traversal vulnerability. Affected component paths: gespage/doDownloadData and gespage/webapp/doDownloadData allow an attacker to access sensitive files, enabling potential data leakage. Root cause is a directory traversal flaw within Gespage 8.2.1. Impa...
CVE-2021-33807
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...
CVE-2021-33807: Improper Limitation of a Pathname to a Restricted Directory
Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...
PT-2021-20329
Name of the Vulnerable Software and Affected Versions: Cartadis Gespage versions 8.2.1 and earlier Description: The issue allows Directory Traversal in the "gespage/doDownloadData" and "gespage/webapp/doDownloadData" API endpoints. Recommendations: For Cartadis Gespage versions 8.2.1 and earlier,...
Cartadis Gespage path traversal vulnerability
cartadis Cartadis Gespage is an application from cartadis Inc. a print management software that includes features such as print accounting, printer monitoring, user management, payments, quotas, and redirection rules for complete management of copies and prints. A path traversal vulnerability...
Cross site scripting
Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...
CVE-2018-9147
Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...
CVE-2018-9147
Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...
CVE-2018-9147
Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...
CVE-2018-9147
Gespage software, version 7.5.7, is affected by a cross-site scripting (XSS) vulnerability. The issue allows a remote attacker to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/user_reg.jsp. The available sources describe the vulnerability but d...