CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

CVE-2023-37777: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

CVE-2015-8247

CVE-2015-8247 is a reflected Cross‑Site Scripting (XSS) vulnerability in Synnefo Internet Management Software (IMS) 2015 affecting the synnefoclient. The issue arises in the packagehistory/listusagesdata endpoint via the plan_name parameter, enabling remote attackers to inject arbitrary script/HT...

CVE-2015-8247: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in synnefoclient in Synnefo Internet Management Software IMS 2015 allows remote attackers to inject arbitrary web script or HTML via the planname parameter to packagehistory/listusagesdata...

PT-2015-7754

Name of the Vulnerable Software and Affected Versions Synnefo Internet Management Software IMS 2015 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the plan name parameter to the "packagehistory/listusagesdata" endpoint. This could...