Lucene search
K

9 matches found

CNVD
CNVD
added 2021/03/29 12:0 a.m.5 views

Testes de Codigo Elevation of Privilege Vulnerability

Testesdecodigogratis Testes de Codigo is a mobile application from Testesdecodigogratis in Portugal that provides users with driver's license learning. A security vulnerability exists in Testes de Codigo 11.4 and prior that allows an attacker to tamper with the Boolean values of the parameters...

9.8CVSS7AI score0.00433EPSS
Exploits0References1
OSV
OSV
added 2021/02/16 3:15 p.m.2 views

CVE-2021-25648

Mobile application "Testes de Codigo" 11.4 and prior allows an attacker to gain access to the administrative interface and premium features by tampering the boolean value of parameters "isAdmin" and "isPremium" located on device storage...

9.8CVSS7.3AI score0.00433EPSS
Exploits0References1
Prion
Prion
added 2021/02/16 3:15 p.m.10 views

Design/Logic Flaw

Mobile application "Testes de Codigo" 11.4 and prior allows an attacker to gain access to the administrative interface and premium features by tampering the boolean value of parameters "isAdmin" and "isPremium" located on device storage...

7.5CVSS9.5AI score0.00433EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/02/16 2:45 p.m.32 views

CVE-2021-25648

CVE-2021-25648 affects the mobile app Testes de Codigo (versions 11.4 and prior). The issue allows an attacker to gain access to the administrative interface and premium features by tampering the Boolean flags isAdmin and isPremium stored on the device, effectively enabling privilege escalation w...

9.8CVSS9.5AI score0.00433EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/02/16 12:0 a.m.2 views

PT-2021-16726 · Unknown · Testes De Codigo

Name of the Vulnerable Software and Affected Versions: Testes de Codigo versions 11.4 and prior Description: The issue allows an attacker to gain access to the administrative interface and premium features by tampering with the boolean value of parameters isAdmin and isPremium located on device...

9.8CVSS9.5AI score0.00433EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/02/16 12:0 a.m.2 views

Testesdecodigogratis Testes de Codigo 安全漏洞

Testesdecodigogratis Testes de Codigo is a mobile application from Testesdecodigogratis in Portugal that provides users with driver's license learning. A security vulnerability exists in Testes de Codigo 11.4 and prior that allows an attacker to tamper with the Boolean values of the parameters...

9.8CVSS7.3AI score0.00433EPSS
Exploits0References2
Prion
Prion
added 2021/01/28 7:15 p.m.6 views

Cross site scripting

Mobile application "Testes de Codigo" v11.3 and prior allows stored XSS by injecting a payload in the "feedback" message field causing it to be stored in the remote database and leading to its execution on client devices when loading the "feedback list", either by accessing the website directly o...

3.5CVSS5.4AI score0.00298EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/01/28 6:49 p.m.35 views

CVE-2021-25647

CVE-2021-25647 affects the mobile application “Testes de Codigo” up to version v11.3. The issue is a stored XSS in the feedback message field: payloads are stored in the remote database and later executed on client devices when loading the feedback list (via website or app). The available connect...

5.4CVSS5.4AI score0.00298EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/01/28 12:0 a.m.3 views

Testesdecodigogratis Testes de Codigo Cross-Site Scripting Vulnerability

Testesdecodigogratis Testes de Codigo is a mobile application from Testesdecodigogratis Portugal that provides users with driver's license learning. A cross-site scripting vulnerability exists in Testesdecodigogratis Testes de Codigo v11.3 and prior that allows storing the "Feedback" message fiel...

5.4CVSS6AI score0.00298EPSS
Exploits0References2
Rows per page
Query Builder