46 matches found
IDM Sistemas QSige SQL Injection Vulnerability
IDM Sistemas QSige is a communication management system from IDM Sistemas. A security vulnerability exists in IDM Sistemas QSige that stems from a web application that does not properly filter input parameters, resulting in SQL injection, DoS, or information disclosure...
IDM Sistemas QSige Cross-Site Scripting Vulnerability
IDM Sistemas QSige is a communication management system from IDM Sistemas. IDM Sistemas QSige suffers from a cross-site scripting vulnerability that stems from allowing an attacker to perform XSS attacks against certain resources, resulting in a DoS condition as well as other operations...
PT-2023-27741 · Qsige · Qsige
Name of the Vulnerable Software and Affected Versions: QSige affected versions not specified Description: The QSige login SSO lacks an access control mechanism to verify if a user has sufficient permissions to request a resource. To exploit this, a user must first log into the application...
IDM Sistemas QSige Security Vulnerability
IDM Sistemas QSige is a communication management system from IDM Sistemas. A security vulnerability exists in QSige login SSO that stems from the absence of an access control mechanism to verify that the user requesting the resource has sufficient privileges to perform this operation...
PT-2023-27735 · Unknown · Qsige Monitor
Name of the Vulnerable Software and Affected Versions: QSige Monitor affected versions not specified Description: The QSige Monitor application lacks an access control mechanism to verify if a user has sufficient permissions to access a resource. A user must be logged into the application to...
PT-2023-27746 · Qsige · Qsige
Name of the Vulnerable Software and Affected Versions: QSige affected versions not specified Description: The QSige login SSO lacks an access control mechanism to verify if a user has sufficient permissions to request a resource. To exploit this, a user must first log into the application...