Lucene search
+L

38 matches found

Nuclei
Nuclei
•added 2026/10/04 2:38 a.m.•105 views

Cartadis Gespage 8.2.1 - Directory Traversal

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. id: CVE-2021-33807 info: name: Cartadis Gespage 8.2.1 - Directory Traversal author: daffainfo severity: high description: Cartadis Gespage through 8.2.1 allows Directory Traversa...

7.5CVSS7.2AI score0.16139EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/01/09 11:26 a.m.•17 views

CVE-2021-33807

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...

7.5CVSS7.2AI score0.16139EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-20746

Malware in sbrugna...

6.1CVSS6.3AI score0.00757EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2017-16968

Malware in sbrugna...

6.1CVSS6.3AI score0.0199EPSS
SaveExploits3References4
NVD
NVD
•added 2021/07/12 3:15 p.m.•37 views

CVE-2021-33807

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...

7.5CVSS0.16139EPSS
SaveExploits1References4
OSV
OSV
•added 2021/07/12 3:15 p.m.•17 views

CVE-2021-33807

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...

7.5CVSS5.8AI score0.16139EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/07/12 3:15 p.m.•9 views

CVE-2021-33807

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...

7.5CVSS7.1AI score0.16139EPSS
SaveExploits1References6
Prion
Prion
•added 2021/07/12 3:15 p.m.•32 views

Directory traversal

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...

5CVSS7.5AI score0.16139EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2021/07/12 2:51 p.m.•108 views

CVE-2021-33807

Cartadis Gespage 8.2.1 contains a Directory Traversal vulnerability. Affected component paths: gespage/doDownloadData and gespage/webapp/doDownloadData allow an attacker to access sensitive files, enabling potential data leakage. Root cause is a directory traversal flaw within Gespage 8.2.1. Impa...

7.5CVSS7.5AI score0.16139EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/07/12 2:51 p.m.•42 views

CVE-2021-33807

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...

7.7AI score0.16139EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/12 12:00 a.m.•4 views

CVE-2021-33807: Improper Limitation of a Pathname to a Restricted Directory

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData...

7.5CVSS5.8AI score0.16139EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/07/12 12:00 a.m.•17 views

Cartadis Gespage 路径遍历漏洞

cartadis Cartadis Gespage is an application from cartadis Inc. a print management software that includes features such as print accounting, printer monitoring, user management, payments, quotas, and redirection rules for complete management of copies and prints. A path traversal vulnerability...

7.5CVSS7.3AI score0.16139EPSS
SaveExploits1References5
Prion
Prion
•added 2018/03/30 4:29 p.m.•26 views

Cross site scripting

Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...

4.3CVSS6.2AI score0.00757EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2018/03/30 4:29 p.m.•9 views

CVE-2018-9147

Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...

6.1CVSS5.7AI score0.00757EPSS
SaveExploits0References3
OSV
OSV
•added 2018/03/30 4:29 p.m.•15 views

CVE-2018-9147

Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...

6.1CVSS5.9AI score0.00757EPSS
SaveExploits0References1
NVD
NVD
•added 2018/03/30 4:29 p.m.•24 views

CVE-2018-9147

Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...

6.1CVSS6.3AI score0.00757EPSS
SaveExploits0References1
CVE
CVE
•added 2018/03/30 4:00 p.m.•46 views

CVE-2018-9147

Gespage software, version 7.5.7, is affected by a cross-site scripting (XSS) vulnerability. The issue allows a remote attacker to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/user_reg.jsp. The available sources describe the vulnerability but d...

6.1CVSS6.2AI score0.00757EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/03/30 4:00 p.m.•39 views

CVE-2018-9147

Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...

6.3AI score0.00757EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/30 12:00 a.m.•7 views

CVE-2018-9147: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inject arbitrary web script or HTML via the email, passwd, and repasswd parameters to webapp/users/userreg.jsp...

6.1CVSS6.5AI score0.00757EPSS
SaveExploits0References2
NVD
NVD
•added 2018/01/08 7:29 p.m.•28 views

CVE-2017-7998

Multiple cross-site scripting XSS vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the 1 printer name when adding a printer in the admin panel or 2 username parameter to webapp/users/userreg.jsp...

6.1CVSS6.1AI score0.0199EPSS
SaveExploits3References2
Rows per page
Query Builder