CVE-2021-38694

SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection...

CVE-2021-38694

SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection...

Sql injection

SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection...

CVE-2021-38697

CVE-2021-38697 affects SoftVibe SARABAN for INFOMA 1.1. The issue is an unauthenticated unrestricted file upload due to insufficient access control/file type validation, allowing uploads of any extension and potentially arbitrary code execution. Several sources corroborate the basic affect and im...

CVE-2021-38697

SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file extension which can lead to arbitrary code execution...

CVE-2021-38696

SoftVibe SARABAN for INFOMA 1.1 has Incorrect Access Control vulnerability, that allows attackers to access signature files on the application without any authentication...

CVE-2021-38696

SoftVibe SARABAN for INFOMA 1.1 is affected by CVE-2021-38696 due to an Incorrect Access Control vulnerability that allows attackers to access signature files without authentication. The issue is described as a lack of proper access enforcement over signed files within the application, leading to...

CVE-2021-38695

SoftVibe SARABAN for INFOMA 1.1 is vulnerable to stored cross-site scripting XSS that allows users to store scripts in certain fields e.g. subject, description of the document form...

CVE-2021-38695

CVE-2021-38695 affects SoftVibe SARABAN for INFOMA 1.1. A stored XSS vulnerability is present in the document form, allowing scripts to be stored in fields such as subject and description due to inadequate input handling/output encoding. Public mappings in multiple sources corroborate a cross-sit...

CVE-2021-38694

SoftVibe SARABAN for INFOMA 1.1 allows SQL Injection...

CVE-2021-38694

CVE-2021-38694 affects SoftVibe SARABAN for INFOMA 1.1. The connected documents confirm a SQL Injection vulnerability in SoftVibe SARABAN for INFOMA 1.1, caused by improper input handling in the product’s web/app layer. Impact stated in sources includes potential data disclosure; CVSSv3.1 base sc...

PT-2022-10754 · Softvibe · Softvibe Saraban For Infoma

Name of the Vulnerable Software and Affected Versions: SoftVibe SARABAN for INFOMA version 1.1 Description: The issue allows attackers to access signature files on the application without any authentication due to incorrect access control. Recommendations: For SoftVibe SARABAN for INFOMA version...

PT-2022-10753 · Softvibe · Softvibe Saraban For Infoma

Name of the Vulnerable Software and Affected Versions: SoftVibe SARABAN for INFOMA version 1.1 Description: The issue allows users to store scripts in certain fields, such as subject and description, of the document form, enabling stored cross-site scripting XSS. Recommendations: For SoftVibe...

PT-2022-10752 · Softvibe · Softvibe Saraban For Infoma

Name of the Vulnerable Software and Affected Versions: SoftVibe SARABAN for INFOMA version 1.1 Description: The issue allows SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

Saraban 代码问题漏洞

Saraban is a file management system from Softvibe Thailand. It is used to transfer files and notifications to reduce unnecessary duplication.A file upload vulnerability exists in Saraban, which stems from the application's file upload feature that does not properly perform access control and file...

PT-2022-10755 · Softvibe · Softvibe Saraban For Infoma

Name of the Vulnerable Software and Affected Versions: SoftVibe SARABAN for INFOMA version 1.1 Description: The issue allows unauthenticated unrestricted file upload, enabling attackers to upload files with any file extension, which can lead to arbitrary code execution. Recommendations: For...

Softvibe Saraban SQL注入漏洞

Softvibe Saraban is a document management system from Softvibe Thailand. It is used for transferring files and notifications to reduce unnecessary duplication. softvibe Saraban has a SQL injection vulnerability in v1.1, which can be exploited by attackers to execute illegal SQL commands to steal...

Softvibe Saraban 安全漏洞

Saraban is a document management system from Softvibe, Thailand. It is used for transferring files and notifications to reduce unnecessary duplication.SARABAN suffers from an access control error vulnerability that stems from the application not properly enforcing access control over signed files...