CVE-2022-27434

CVE-2022-27434 UNIT4 TETA Mobile Edition 29HF13에서 errorReporting 페이지의 ProfileName 매개변수를 통해 SQL 삽입 취약점이 발견되었습니다. 취약점은 애플리케이션에서 생성된 오류 페이지이 경우: 비밀번호 변경 중에 존재합니다. ProfileName 매개변수에 따옴표를 추가하면 Oracle 데이터베이스 오류가 발생하며, 이는 입력 값이 적절히 필터링되지 않고 있음을 의미합니다. 요청 응답 해결 방법 이 취약점은 이미 UNIT4 서비스 포털을 통해 보고되었습니다. 패치는 ...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

EUVD-2022-31937

Malicious code in bioql PyPI...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

Sql injection

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

CVE-2022-27434

UNIT4 TETA Mobile Edition (ME) prior to 29.5.HF17 contains a SQL injection in the errorReporting page via the ProfileName parameter. Affected product: UNIT4 TETA Mobile Edition (ME). Root cause: improper handling of the ProfileName input enabling SQL injection. Impact per CVSS: high confidentiali...

PT-2022-18425

Name of the Vulnerable Software and Affected Versions UNIT4 TETA Mobile Edition ME versions prior to 29.5.HF17 Description The issue is related to a SQL injection vulnerability. It can be exploited via the ProfileName parameter in the "errorReporting" page. Recommendations For versions prior to...

CVE-2022-27434: Improper Neutralization of Special Elements used in an SQL Command

UNIT4 TETA Mobile Edition ME before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in the errorReporting page...

UNIT4 TETA Mobile SQL注入漏洞

UNIT4 TETA Mobile is a web-based application from UNIT4. It can be used on desktop and mobile devices, including smartphones and tablets. A security vulnerability exists in UNIT4 TETA Mobile versions prior to 29.5.HF17 that stems from the ProfileName parameter in the bug report page containing an...

Unit4 Polska TETA Web Session Fixation Vulnerability

Unit4 Polska TETA Web formerly known as TETA Galactica is a package of solutions including personnel, financial and logistics management systems from Unit4 Poland. A session fixation vulnerability exists in Unit4 Polska TETA Web 22.62.3.4 and earlier versions. A remote attacker can exploit the...

Session fixation

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

CVE-2015-1174

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

CVE-2015-1174

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

CVE-2015-1174

CVE-2015-1174 affects Unit4 Polska TETA Web (formerly TETA Galactica) up to version 22.62.3.4. The vulnerability is a session fixation flaw that allows a remote attacker to hijack a user’s web session by manipulating the session identifier. The CNVD entry corroborates the affected software and vu...

CVE-2015-1174: Session Fixation

Session fixation vulnerability in Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id...

Unit4 Polska TETA Web Authorization Bypass Vulnerability

Unit4 Polska TETA Web formerly known as TETA Galactica is a package of solutions including personnel, financial and logistics management systems from Unit4 Poland. An authorization bypass vulnerability exists in Unit4 Polska TETA Web version 22.62.3.4. Due to the program failing to properly...

CVE-2015-1173

Unit4 Polska TETA Web formerly TETA Galactica 22.62.3.4 does not properly restrict access to the 1 Design Mode and 2 Debug Logger mode modules, which allows remote attackers to gain privileges via crafted "received parameters."...