Sql injection

QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application...

CVE-2023-4103

CVE-2023-4103 describes a remote SQL injection in IDM Sistemas QSige caused by improper input parameter filtering in the web application. This leads to potential SQL injections, information disclosure, and Denial of Service, with all three CIA impacts rated High. A prerequisite for exploitation i...

CVE-2023-4103 Multiple vulnerabilities in IDM Sistemas QSige

QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application...

CVE-2023-4102 Multiple vulnerabilities in IDM Sistemas QSige

QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

CVE-2023-4102 Multiple vulnerabilities in IDM Sistemas QSige

QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

CVE-2023-4102

CVE-2023-4102 affects the QSige login SSO in IDM Sistemas QSige. The root cause is the absence of an access control mechanism to verify that a requesting user has sufficient permissions before granting access to a resource. This leads to potential unauthorized access with high impact on confident...

CVE-2023-4101 Multiple vulnerabilities in IDM Sistemas QSige

The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

CVE-2023-4101

CVE-2023-4101 affects the QSige login SSO component of IDM Sistemas QSige. The root cause is a missing access control mechanism to verify that a requesting user has adequate permissions before accessing a resource, with login required as a prerequisite. Connected sources (Red Hat, NVD, CVE listin...

CVE-2023-4100 Multiple vulnerabilities in IDM Sistemas QSige

Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions...

CVE-2023-4100 Multiple vulnerabilities in IDM Sistemas QSige

Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions...

CVE-2023-4099

The CVE-2023-4099 issue affects QSige Monitor: the application lacks an access-control check to confirm a user’s permissions before accessing a resource, requiring login as a prerequisite. Core detail across connected documents confirms this is an authorization bypass/Privilege Management flaw in...

CVE-2023-4099 Multiple vulnerabilities in IDM Sistemas QSige

The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

CVE-2023-4099 Multiple vulnerabilities in IDM Sistemas QSige

The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

CVE-2023-4098 Multiple vulnerabilities in IDM Sistemas QSige

It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application...

CVE-2023-4097 Multiple vulnerabilities in IDM Sistemas QSige

The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username...

CVE-2023-4097 Multiple vulnerabilities in IDM Sistemas QSige

The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username...

IDM Sistemas QSige Security Vulnerability

IDM Sistemas QSige is a communication management system from IDM Sistemas. A security vulnerability exists in IDM Sistemas QSige Monitor that stems from the application not having an access control mechanism to verify that the user requesting the resource has sufficient privileges to perform this...

IDM Sistemas QSige SQL Injection Vulnerability

IDM Sistemas QSige is a communication management system from IDM Sistemas. IDM Sistemas QSige suffers from a SQL injection vulnerability that stems from a web application that does not properly filter input parameters, resulting in SQL injection, DoS, or information disclosure...

PT-2023-27738 · Idm Sistemas Qsige +1 · Qsige

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an attacker to perform stored XSS attacks on certain resources. Exploiting this can lead to a Denial of Service DoS condition, among...

IDM Sistemas QSige Code Issue Vulnerability

IDM Sistemas QSige is a communication management system from IDM Sistemas. A code issue vulnerability exists in IDM Sistemas QSige that stems from the file upload functionality not being implemented correctly and allowing any type of file to be uploaded...