47 matches found
CVE-2025-29529
SQLi ITC Multiplan CVE-2025-29529 Discovery On February 21, 2025, an SQL injection vulnerability was identified in the “Multiplan” platform developed by ITC Systems during a client engagement. Affected Versions This vulnerability has been only been tested on v3.7.4.1002 Attack Vector The...
@hamelbarrero/report (>=1.0.12, <=1.0.17), ls-itc-cms (>=2.0.2, <=2.0.4) potentially affected by CVE-2026-106139 via @progress/kendo-vue-charts (3.14.2)
@progress/kendo-vue-charts NPM version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on @progress/kendo-vue-charts and may be impacted: - @hamelbarrero/report =1.0.12, =2.0.2, =2.0.4 Source cves: CVE-2026-106139 Source advisory: MEND:CVE-2026-106...
Malicious code in itc-actors-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22687e1f7601dde1753d3775925d62d040892631394937e56e9b9fba74fb85c6 The package contains callback.js which collects host identifiers and user information os.hostname, os.userInfo, os.platform, cwd and transmits them v...
MAL-2026-4589 Malicious code in itc-actors-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22687e1f7601dde1753d3775925d62d040892631394937e56e9b9fba74fb85c6 The package contains callback.js which collects host identifiers and user information os.hostname, os.userInfo, os.platform, cwd and transmits them v...
EUVD-2025-11983
Malicious code in bioql PyPI...
CVE-2025-29529
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...
CVE-2025-29529
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...
ITC Systems Multiplan/Matrix OneCard platform security vulnerabilities
ITC Systems Multiplan/Matrix OneCard platform is a campus or institutional card management platform from ITC Systems. A security vulnerability exists in ITC Systems Multiplan/Matrix OneCard platform version 3.7.4.1002, which originates from a SQL injection vulnerability in the Forgotpassword.aspx...
PT-2025-17858 · Itc Systems · Itc Systems Multiplan/Matrix Onecard
Name of the Vulnerable Software and Affected Versions: ITC Systems Multiplan/Matrix OneCard platform version 3.7.4.1002 Description: The issue is related to a SQL injection vulnerability. It affects the Forgotpassword.aspx component. Recommendations: For version 3.7.4.1002, consider restricting...
CVE-2025-29529
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...
CVE-2025-29529
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...
CVE-2025-29529
The ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 is vulnerable to a SQL injection flaw in the ForgotPassword.aspx component. The vulnerability stems from a lack of sanitization on the POST parameter ctl00%24cpLogin%24ctlForgotPassword%24txtEmail, which allows an unauthenticated attac...
CVE-2025-29529: Improper Neutralization of Special Elements used in an SQL Command
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...
CVE-2025-29529
ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...
Virtuoso-OpenSource itc_hash_compare DoS
The vulnerability of the itchashcompare component in the Virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...
DEBIAN-CVE-2024-57644
An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
DEBIAN-CVE-2024-57636
An issue in the itcsamplerowcheck component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
UBUNTU-CVE-2024-57644
An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...