86 matches found
PT-2023-24383 · Ocomon · Ocomon
Name of the Vulnerable Software and Affected Versions: Ocomon versions prior to 4.0.1 Description: An information disclosure issue in the component users-grid-data.php of Ocomon allows attackers to obtain sensitive information such as e-mails and usernames. Recommendations: For versions prior to...
CVE-2022-40798
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover...
CVE-2022-40798
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover...
Design/Logic Flaw
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover...
PT-2022-25542 · Ocomon · Ocomon
Name of the Vulnerable Software and Affected Versions: OcoMon version 4.0RC1 Description: The issue is related to Incorrect Access Control. Through a request, a user can obtain the real email, and by sending the same request with the correct email, it is possible to perform an account takeover...
CVE-2022-40798
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover...
CVE-2022-40798
OcoMon 4.0RC1 is affected by an Incorrect Access Control vulnerability. An attacker can retrieve the real email via a crafted request, and by repeating the request with the correct email may achieve account takeover. Affected product/version: OcoMon 4.0RC1. Root cause stated: improper access cont...
CVE-2022-40798
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover...
OcoMon security vulnerabilities
OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. A security vulnerability exists in versions prior to OcoMon 4.0RC1 that stems from incorrect access control...
CVE-2022-40798: Improper Access Control
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover...
CVE-2022-41390
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...
CVE-2022-41390
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...
CVE-2022-41391
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...
CVE-2022-41391
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...
Sql injection
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...
Sql injection
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...
PT-2022-25839
Name of the Vulnerable Software and Affected Versions OcoMon version 4.0 Description A SQL injection issue was found in OcoMon via the cod parameter at the "download.php" endpoint. This allows for potential exploitation. Recommendations For OcoMon version 4.0, consider restricting access to the...
CVE-2022-41390: Improper Neutralization of Special Elements used in an SQL Command
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...
CVE-2022-41390
Summary (CVE-2022-41390): OcoMon v4.0 is affected by a SQL injection vulnerability in the download.php endpoint, triggered via the cod parameter. The issue is described as affecting the ability to inject SQL through this parameter, with the CVSS v3.1 metrics indicating a critical impact (AV:N/AC:...