75 matches found
CVE-2022-48324
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 pesquisa, 2 data, 3 data2, 4 nome, 5 descricao, 6 idDocumentos, 7 id in file application/controllers/Arquivos.php; 8 senha, 9 nomeCliente, 10 contato, 1...
PT-2023-15703
Name of the Vulnerable Software and Affected Versions Mapos version 4.39.0 Description Multiple Cross Site Scripting XSS vulnerabilities in Mapos allow attackers to execute arbitrary code. The affected parameters include: year, oldSenha, novaSenha, termo, nome, cnpj, ie, cep, logradouro, numero,...
PT-2023-15704
Name of the Vulnerable Software and Affected Versions Mapos version 4.39.0 Description Multiple Cross Site Scripting XSS vulnerabilities in Mapos allow attackers to execute arbitrary code. The issue affects various parameters, including nome, aCliente, eCliente, dCliente, vCliente, aProduto,...
CVE-2022-48326
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 nome, 2 aCliente, 3 eCliente, 4 dCliente, 5 vCliente, 6 aProduto, 7 eProduto, 8 dProduto, 9 vProduto, 10 aServico, 11 eServico, 12 dServico, 13 vServico...
CVE-2022-48327: Improper Neutralization of Input During Web Page Generation
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 dataInicial, 2 dataFinal, 3 tipocliente, 4 format, 5 precoInicial, 6 precoFinal, 7 estoqueInicial, 8 estoqueFinal, 9 deid, 10 ateid, 11 clientesid, 12...
Mapos 跨站脚本漏洞
Mapos is a service order control system by Ramon Silva Personal Developer. A security vulnerability exists in Mapos version 4.39.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that can be exploited by an attacker to execute arbitrary code...
CVE-2022-48327
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 dataInicial, 2 dataFinal, 3 tipocliente, 4 format, 5 precoInicial, 6 precoFinal, 7 estoqueInicial, 8 estoqueFinal, 9 deid, 10 ateid, 11 clientesid, 12...
CVE-2022-48326
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 nome, 2 aCliente, 3 eCliente, 4 dCliente, 5 vCliente, 6 aProduto, 7 eProduto, 8 dProduto, 9 vProduto, 10 aServico, 11 eServico, 12 dServico, 13 vServico...
Mapos 跨站脚本漏洞
Mapos is a service order control system by Ramon Silva Personal Developer. A security vulnerability exists in Mapos version 4.39.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that can be exploited by an attacker to execute arbitrary code...
CVE-2022-48325
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 year, 2 oldSenha, 3 novaSenha, 4 termo, 5 nome, 6 cnpj, 7 ie, 8 cep, 9 logradouro, 10 numero, 11 bairro, 12 cidade, 13 uf, 14 telefone, 15 email, 16 id,...
Mapos 跨站脚本漏洞
Mapos is a service order control system by Ramon Silva Personal Developer. A security vulnerability exists in Mapos version 4.39.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that can be exploited by an attacker to execute arbitrary code...
CVE-2022-48325
Summary (CVE-2022-48325) : Multiple Cross Site Scripting (XSS) vulnerabilities affect Mapos 4.39.0, enabling arbitrary code execution per the cited entries. The flaws are linked to unsanitized user-controlled inputs across numerous parameters in Mapos/controllers (Mapos.php), Mine.php, and Os.php...
CVE-2022-48326
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 nome, 2 aCliente, 3 eCliente, 4 dCliente, 5 vCliente, 6 aProduto, 7 eProduto, 8 dProduto, 9 vProduto, 10 aServico, 11 eServico, 12 dServico, 13 vServico...
CVE-2022-48327
CVE-2022-48327 concerns Mapos 4.39.0 with multiple cross-site scripting (XSS) vulnerabilities in several input points. The vulnerability affects a wide set of parameters across PHP controllers and views, including: Relatorios.php, Servicos.php, Usuarios.php, Vendas.php, Lancamentos view, painel, ...
CVE-2022-48325
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 year, 2 oldSenha, 3 novaSenha, 4 termo, 5 nome, 6 cnpj, 7 ie, 8 cep, 9 logradouro, 10 numero, 11 bairro, 12 cidade, 13 uf, 14 telefone, 15 email, 16 id,...
CVE-2022-48327
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 dataInicial, 2 dataFinal, 3 tipocliente, 4 format, 5 precoInicial, 6 precoFinal, 7 estoqueInicial, 8 estoqueFinal, 9 deid, 10 ateid, 11 clientesid, 12...
CVE-2022-48327
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 dataInicial, 2 dataFinal, 3 tipocliente, 4 format, 5 precoInicial, 6 precoFinal, 7 estoqueInicial, 8 estoqueFinal, 9 deid, 10 ateid, 11 clientesid, 12...
CVE-2022-48326
Mapos 4.39.0 contains multiple Cross Site Scripting (XSS) vulnerabilities that can allow an attacker to execute arbitrary code. The CVE-2022-48326 entry is supported by connected sources detailing the affected product (Mapos 4.39.0), the root cause (XSS in numerous input parameters), and the scop...
CVE-2022-48324
CVE-2022-48324 affects Mapos version 4.39.0 and encompasses multiple XSS vulnerabilities affecting numerous input fields across modules (Arquivos.php, Clientes.php, Cobrancas.php, Financeiro.php, Garantias.php, Login.php). The root cause is improper handling/sanitization of user-supplied input, e...
CVE-2022-48324
Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 pesquisa, 2 data, 3 data2, 4 nome, 5 descricao, 6 idDocumentos, 7 id in file application/controllers/Arquivos.php; 8 senha, 9 nomeCliente, 10 contato, 1...