88 matches found
Privilege escalation
Improper Privilege Management vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.This issue affects e-municipality module: before v.105...
Privilege escalation
Improper Privilege Management vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.This issue affects e-municipality module: before v.105...
CVE-2023-6151 Information Disclosure in Eskom E-municipality
Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipality module: before v.105...
CVE-2023-6150 Information Disclosure in Eskom E-municipality
Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipality module: before v.105...
CVE-2023-6150
The CVE-2023-6150 issue affects the Eskom Computer e-municipality module (versions prior to 105). The root cause is improper privilege management via the use of Privileged APIs, enabling collection of data provided by users and leading to potential information disclosure. Affected behavior is tha...
PT-2023-32545
Name of the Vulnerable Software and Affected Versions ESKOM Computer e-municipality module versions prior to 105 Description The issue is related to the incorrect use of privileged APIs, which allows for the collection of data as provided by users due to improper privilege management...
ESKOM Computer e-municipality module security vulnerability
ESKOM Computer e-municipality module is an application from ESKOM Inc. A security vulnerability exists in versions prior to ESKOM Computer e-municipality module v.105 that stems from improper privilege management and allows collection of user-supplied data...
ESKOM Computer e-municipality module security vulnerability
ESKOM Computer e-municipality module is an application from ESKOM Inc. A security vulnerability exists in versions prior to ESKOM Computer e-municipality module v.105 that stems from improper privilege management and allows collection of user-supplied data...
marilia.sp.gov.br Cross Site Scripting vulnerability OBB-3661323
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
lillehammer.kommune.no Cross Site Scripting vulnerability OBB-3410893
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-2750
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...
CVE-2023-2750
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...
CVE-2023-2750
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection.This issue affects E-municipality: before 6.05...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection.This issue affects E-municipality: before 6.05...
CVE-2023-2750 SQLi in Cityboss Software's E-municipality
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...
CVE-2023-2750
CVE-2023-2750 affects Cityboss E-municipality (versions prior to 6.05). It is an SQL Injection vulnerability caused by improper neutralization of certain elements in SQL commands. Impact, as described, includes potential high confidentiality, integrity, and availability risks. Remediation recomme...
CVE-2023-2750 SQLi in Cityboss Software's E-municipality
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05...
PT-2023-21175 · Unknown · Cityboss E-Municipality
Name of the Vulnerable Software and Affected Versions: Cityboss E-municipality versions prior to 6.05 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
Cityboss E-municipality SQL注入漏洞
Cityboss E-municipality is an e-municipality application from Cityboss, Inc. An SQL injection vulnerability exists in Cityboss E-municipality versions prior to 6.05, which stems from improper neutralization of the particular element used...
Vadi Corporate Information Systems 安全漏洞
Vadi Corporate Information Systems is an information system of Vadi Corporation. A security vulnerability exists in Vadi Corporate Information Systems versions prior to 23.03.20 that stems from a security issue with the DigiKent Internet Municipality product...