Lucene search
K

75 matches found

RedhatCVE
RedhatCVE
added 2025/11/29 8:9 a.m.5 views

CVE-2025-13771

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS7AI score0.00056EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/29 8:9 a.m.4 views

CVE-2025-13768

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability...

8.8CVSS6.8AI score0.00159EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/29 8:9 a.m.3 views

CVE-2025-13770

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS8AI score0.00038EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/29 8:9 a.m.4 views

CVE-2025-13769

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS8AI score0.00038EPSS
Exploits0References1
OSV
OSV
added 2025/11/28 8:15 a.m.1 views

CVE-2025-13771

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00056EPSS
Exploits0References2
NVD
NVD
added 2025/11/28 8:15 a.m.2 views

CVE-2025-13771

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.00056EPSS
Exploits0References2
NVD
NVD
added 2025/11/28 8:15 a.m.2 views

CVE-2025-13770

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS0.00038EPSS
Exploits0References2
OSV
OSV
added 2025/11/28 8:15 a.m.0 views

CVE-2025-13770

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6AI score
Exploits0References2
OSV
OSV
added 2025/11/28 8:15 a.m.0 views

CVE-2025-13769

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS6.1AI score
Exploits0References2
NVD
NVD
added 2025/11/28 8:15 a.m.1 views

CVE-2025-13768

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability...

8.8CVSS0.00159EPSS
Exploits0References2
OSV
OSV
added 2025/11/28 8:15 a.m.0 views

CVE-2025-13768

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability...

8.8CVSS5.9AI score0.00159EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/28 7:49 a.m.2 views

CVE-2025-13771 Uniong|WebITR - Arbitrary File Read

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6.7AI score0.00056EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/28 7:49 a.m.1 views

EUVD-2025-199863

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6.6AI score0.00056EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/28 7:49 a.m.4 views

CVE-2025-13771 Uniong|WebITR - Arbitrary File Read

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.00056EPSS
Exploits0References2
CVE
CVE
added 2025/11/28 7:49 a.m.11 views

CVE-2025-13771

CVE-2025-13771 concerns WebITR, a system from Uniong. The vulnerability is an Arbitrary File Read caused by a Relative Path Traversal flaw, allowing authenticated remote attackers to download arbitrary system files. Affected details are consistently described across Red Hat, NVD, CIRCL, ENISA EUV...

7.1CVSS6.7AI score0.00056EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/28 7:40 a.m.1 views

CVE-2025-13770 Uniong|WebITR - SQL Injection

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS7.6AI score0.00038EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/28 7:40 a.m.4 views

CVE-2025-13770 Uniong|WebITR - SQL Injection

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS0.00038EPSS
Exploits0References2
CVE
CVE
added 2025/11/28 7:40 a.m.7 views

CVE-2025-13770

CVE-2025-13770 affects WebITR by Uniong. A SQL Injection vulnerability allows authenticated remote attackers to inject arbitrary SQL and read database contents. The issue is documented with CVSS v3.1/4.0 bases (6.5 MEDIUM and 7.1 HIGH, respectively). Affected versions are not specified in the sou...

7.1CVSS7.7AI score0.00038EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/11/28 7:40 a.m.2 views

EUVD-2025-199864

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS7.5AI score0.00038EPSS
Exploits0References3
EUVD
EUVD
added 2025/11/28 7:35 a.m.2 views

EUVD-2025-199865

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS7.5AI score0.00038EPSS
Exploits0References3
Rows per page
Query Builder