CVE-2023-42240

An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/sscheduledfile.php...

CVE-2023-42245

Selesta Visual Access Manager versions prior to 4.42.2 are vulnerable to Cross Site Scripting (XSS) via the monitor/s_scheduledfile.php endpoint. This vulnerability allows for potential malicious script injection due to the improper neutralization of input during web page generation. To resolve t...

Selesta Visual Access Manager 安全漏洞

Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in the Selesta Visual Access Manager sscheduledfile.php file, no details of the vulnerability are available at this time...

CVE-2023-42245: Improper Neutralization of Input During Web Page Generation

Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via monitor/sscheduledfile.php...