CVE-2023-33515: Improper Neutralization of Input During Web Page Generation

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting XSS via query screens...

SoftExpert Suite 跨站脚本漏洞

SoftExpert Suite is a regulatory compliance software solution from SoftExpert Brazil. A security vulnerability exists in SoftExpert Suite version 2.1.9. An attacker could exploit the vulnerability to perform cross-site scripting attacks...

CVE-2023-33515

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting XSS via query screens...

CVE-2023-30330

SoftExpert SE Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gndefaultframe/2.0/defaultframefilter.php...

CVE-2023-30330

SoftExpert SE Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gndefaultframe/2.0/defaultframefilter.php...

Design/Logic Flaw

SoftExpert SE Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gndefaultframe/2.0/defaultframefilter.php...

CVE-2023-30330

SoftExpert SE Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gndefaultframe/2.0/defaultframefilter.php...

CVE-2023-30330

SoftExpert Excellence Suite 2.x before 2.1.3 is affected by a Local File Inclusion in /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php. The issue arises from a PHP include via a base64-encoded path (managerPath), enabling reading arbitrary files and potential remote code execution t...

CVE-2023-30330: Untrusted Search Path

SoftExpert SE Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gndefaultframe/2.0/defaultframefilter.php...

CVE-2023-30330

SoftExpert SE Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gndefaultframe/2.0/defaultframefilter.php...

PT-2023-22638 · Softexpert · Softexpert Excellence Suite

Name of the Vulnerable Software and Affected Versions: SoftExpert SE Excellence Suite versions prior to 2.1.3 Description: The issue concerns Local File Inclusion in the function /se/v42300/generic/gn defaultframe/2.0/defaultframe filter.php. Recommendations: For versions prior to 2.1.3, update t...

SoftExpert Suite 2.1.3 Local File Inclusion

Exploit Title: SoftExpert SE Suite v2.1.3 - Local File Inclusion Date: 27-04-2023 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.softexpert.com/ Version: 2.0 target=$1 u=$2 p=$3 file=$echo -n "$4"|base64 -w 0 end="\0330m\e0m" red="\e0;31m\0331m" blue="\e0;34m\0331m" echo ...

SoftExpert (SE) Suite v2.1.3 - Local File Inclusion Vulnerability

Exploit Title: SoftExpert SE Suite v2.1.3 - Local File Inclusion Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.softexpert.com/ Version: 2.0 target=$1 u=$2 p=$3 file=$echo -n "$4"|base64 -w 0 end="\0330m\e0m" red="\e0;31m\0331m" blue="\e0;34m\0331m" echo -e "\n$4 : $file\...

SoftExpert Suite 安全漏洞

SoftExpert Suite is a regulatory compliance software solution from SoftExpert Brazil. A security vulnerability exists in SoftExpert Suite versions prior to v2.0 through v2.1.3 that stems from the presence of a local file inclusion vulnerability...

Exploit for Untrusted Search Path in Softexpert Excellence_Suite

Remote Code Execution in SoftExpert Excellence Suite 2.0 - CVE...

CVE-2018-12977

A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...

Sql injection

A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...

CVE-2018-12977

A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...

CVE-2018-12977

A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...

CVE-2018-12977

CVE-2018-12977: A SQL injection vulnerability in SoftExpert Excellence Suite 2.0 allows remote authenticated users to pull information from the database via the cddocument parameter in the Downloading Electronic Documents section. The NVD metrics indicate CVSSv3.0 base score 8.8 (HIGH) with NETWO...