CVE-2025-4411

CVE-2025-4411 is an XSS vulnerability in Dataprom Informatics PACS-ACSS. The issue arises from improper neutralization of input during web page generation, allowing cross-site scripting. Affected products are Dataprom PACS-ACSS versions prior to 16.05.2025. The CVSS 3.1 base vector is AV:N/AC:L/P...

CVE-2025-4411 XSS in Dataprom Informatics' PACS-ACSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...

Dataprom Informatics PACS-ACSS 跨站脚本漏洞

Dataprom Informatics PACS-ACSS is a system for managing employee attendance records, access rights and security control at Dataprom Informatics in Turkey. A cross-site scripting vulnerability exists in Dataprom Informatics PACS-ACSS versions prior to 16.05.2025 that originates from cross-site...

PT-2025-30573

Name of the Vulnerable Software and Affected Versions Dataprom Informatics PACS-ACSS versions prior to 16.05.2025 Description The software contains an Improper Neutralization of Input During Web Page Generation, leading to a Cross-Site Scripting XSS issue. This allows for the injection of malicio...

CVE-2024-12143 SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection.This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...

CVE-2024-12143 SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection. This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...

CVE-2024-11739

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...

CVE-2024-11739

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...

CVE-2024-11739 SQLi in Case Informatics' Case ERP

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...

CVE-2024-11739

CVE-2024-11739 describes an SQL injection in Case ERP prior to v2.0.1 due to improper neutralization of special elements in SQL commands. Affected product: Case ERP (Case Informatics). Impact per sources: potential for high confidentiality, integrity, and availability impact. The issue is mitigat...

CVE-2024-11739 SQLi in Case Informatics' Case ERP

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...

Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB SQL注入漏洞

Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB is a software application from Mobilteg Mobile Informatics, Turkey. A SQL injection vulnerability exists in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB, which stems from improper neutralization of special elements in SQL...

HARPT: a Corpus for Analyzing Consumers' Trust and Privacy Concerns in Mobile Health Apps

We present HARPT, a large-scale annotated corpus of mobile health app store reviews aimed at advancing research in user privacy and trust. The dataset comprises over 480,000 user reviews labeled into seven categories that capture critical aspects of trust in applications, trust in providers and...

CVE-2024-7835

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-7735

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-7015

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...

CVE-2024-7078

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows SQL Injection. This issue affects Semtek Sempos: through 31072024...

CVE-2024-1153

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68...

CVE-2024-10035

Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in a Command 'Command Injection', Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in BG-TEK Informatics Security Technologies CoslatV3...

CVE-2024-4658

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TE Informatics Nova CMS allows SQL Injection. This issue affects Nova CMS: before 5.0...