CVE-2024-27574: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to obtain sensitive information via the informacion, idcurso, and tit parameters...

CVE-2024-27574

SQL Injection vulnerability in Trainme Academy version Ichin v.1.3.2 allows a remote attacker to obtain sensitive information via the informacion, idcurso, and tit parameters...

Trainme Academy security vulnerabilities

Trainme Academy is a leading quality education and training solution from Trainme, Inc. A security vulnerability exists in Trainme Academy version v.1.3.2. A remote attacker exploits the vulnerability to obtain sensitive information via the informacion, idcurso, and tit parameters...

PT-2024-21956 · Unknown · Trainme Academy

Name of the Vulnerable Software and Affected Versions: Trainme Academy version Ichin v.1.3.2 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the informacion, idcurso, and tit parameters. Recommendations: For Trainme Academy version Ichin...

CVE-2018-20727

Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php...

CVE-2018-20727

CVE-2018-20727 affects NeDi prior to 1.7Cp3. The vulnerability allows authenticated users to perform server-side command execution via user-controlled parameters: flt (Nodes-Traffic.php), dv (Devices-Graph.php), or tit (drawmap.php). This is a command-injection flaw arising from insufficient inpu...

PT-2019-10185

Name of the Vulnerable Software and Affected Versions: NeDi versions prior to 1.7Cp3 Description: The issue allows authenticated users to execute code on the server side. This can be achieved via the flt parameter to "Nodes-Traffic.php", the dv parameter to "Devices-Graph.php", or the tit paramet...

CVE-2017-2735

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2735

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2695

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

CVE-2017-2695

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

Design/Logic Flaw

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2695

CVE-2017-2695 affects Huawei Enjoy 5 (TIT-AL00C583B211): a directory traversal flaw that lets an attacker obtain files from the email application by tricking a user into installing a malicious app and altering a URI. The underlying issue is a URI-based directory traversal in Huawei smartphones. H...

CVE-2017-2695

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

CVE-2017-2735

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2735

The CVE-2017-2735 entry relates to TIT-AL00 smartphones with software versions prior to TIT-AL00C583B214, which disclose an exposed system interface vulnerability. The issue arises because the system interface for external applications is not properly restricted, allowing an attacker to trick a u...

PT-2017-15482

Name of the Vulnerable Software and Affected Versions TIT-AL00C583B211 affected versions not specified Description The issue allows an attacker to obtain files in the email application due to a directory traversal vulnerability. Recommendations At the moment, there is no information about a newer...

CVE-2017-2735: Exposed Dangerous Method or Function

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

CVE-2017-2695: Improper Limitation of a Pathname to a Restricted Directory

TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application...

PT-2017-15522

Name of the Vulnerable Software and Affected Versions TIT-AL00 smartphones with software versions earlier than TIT-AL00C583B214 Description The issue concerns an exposed system interface in the software, which is used for interaction with external applications. However, the software does not...