8 matches found
CVE-2019-12734
SiteVision 4 has Incorrect Access Control...
8.8CVSS6.9AI score0.02084EPSS
SaveExploits5References1
EUVD-2019-4323
Malware in sbrugna...
8.8CVSS8.4AI score0.02084EPSS
SaveExploits5References8
CVE-2019-12733
SiteVision 4 allows Remote Code Execution...
8.8CVSS7.4AI score0.06039EPSS
SaveExploits5References6
CVE-2019-12733
SiteVision 4 allows Remote Code Execution...
9CVSS8.9AI score0.06039EPSS
SaveExploits5References6
CVE-2019-12734
SiteVision 4 has Incorrect Access Control...
8.8CVSS8.8AI score0.02084EPSS
SaveExploits5References6
Improper access control
SiteVision 4 has Incorrect Access Control...
6.5CVSS8.7AI score0.02084EPSS
SaveExploits5References6Affected Software1
Remote code execution
SiteVision 4 allows Remote Code Execution...
9CVSS8.8AI score0.06039EPSS
SaveExploits5References6Affected Software1
CVE-2019-12734
SiteVision 4.x/5.x suffers from Insufficient Module Access Control (CVE-2019-12734). A low-privilege user (e.g., Editor) can inject or edit script modules during page edits, enabling Cross‑Site Scripting and in some descriptions Remote Code Execution. Affected versions: SiteVision 4 up to 4.5.6 a...
8.8CVSS8.6AI score0.02084EPSS
SaveExploits5References6Affected Software1
20