158 matches found
CVE-2023-42243
In Selesta Visual Access Manager 4.42.2, an authenticated user can access the administrative page /common/vamSql.php, which allows for arbitrary SQL queries...
CVE-2023-42249
CVE-2023-42249 affects Selesta Visual Access Manager prior to version 4.42.2. The vulnerability is a Cross Site Scripting (XSS) in the vam_visits.php endpoint. Affected versions are
CVE-2023-42243
In Selesta Visual Access Manager, versions prior to 4.42.2 are affected. An authenticated user can access the administrative page /common/vam_Sql.php and execute arbitrary SQL queries due to lack of validation of externally entered SQL statements. The impact is potential data exposure or modifica...
CVE-2023-42242
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/sterminal.php...
CVE-2023-42235
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple parameters of /monitor/snormalizedtrans.php...
CVE-2023-42246
Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via /vam/vamep.php...
PT-2025-1476 · Unknown · Selesta Visual Access Manager
The software that is vulnerable is Selesta Visual Access Manager, specifically versions less than 4.42.2. The vulnerability is a Cross Site Scripting XSS vulnerability that can be exploited via the /common/autocomplete.php file. This vulnerability has been assigned the CVE identifier...
CVE-2023-42240
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/sscheduledfile.php...
PT-2025-1467 · Selesta · Selesta Visual Access Manager
Name of the Vulnerable Software and Affected Versions: Selesta Visual Access Manager VAM versions prior to 4.42.2 Description: An issue was discovered in Selesta Visual Access Manager VAM where an authenticated attacker can perform SQL Injection in multiple POST parameters of "/vam/vam...
CVE-2023-42247
Selesta Visual Access Manager prior to version 4.42.2 is documented as vulnerable to cross-site scripting (XSS) via the endpoint monitor/s_monitor_map.php. The CVE-2023-42247 entry notes a CVSS v3.1 base score of 6.1 (Medium) with privileges required: None and user interaction required, affecting...
CVE-2023-42246
CVE-2023-42246 concerns Selesta Visual Access Manager versions before 4.42.2. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the /vam/vam_ep.php endpoint. Impact details are limited to XSS with no exploit conditions provided; CVSS v3.1 base score 6.1 (MEDIUM). Affected/fix...
CVE-2023-42241
Vulnerability summary: Selesta Visual Access Manager (VAM) prior to 4.42.2 contains a SQL injection in multiple POST parameters of /vam/vam_anagraphic.php (authenticated access required). This is confirmed across multiple sources (Red Hat advisory, CVE entries, CNVD, CNNVD, CIRCL). Affected versi...
CVE-2023-42240
CVE-2023-42240 affects Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can trigger a SQL injection in multiple POST parameters of /monitor/s_scheduledfile.php. The connected sources consistently describe the issue as an authenticated SQL injection vulnerability in t...
CVE-2023-42244
Selesta Visual Access Manager (VAM) prior to 4.42.2 is affected by CVE-2023-42244 due to a SQL Injection vulnerability in multiple POST parameters of /vam/vam_visits.php. An authenticated attacker with LOW privileges and no user interaction can exploit this to impact confidentiality, integrity, a...
CVE-2023-42250
CVE-2023-42250 concerns Selesta Visual Access Manager versions prior to 4.42.2. The vulnerability is a Cross-Site Scripting (XSS) flaw that can be triggered via the endpoint /common/autocomplete.php due to inadequate input handling. Several sources corroborate an XSS risk, with the root cause des...
CVE-2023-42235
CVE-2023-42235 concerns Selesta Visual Access Manager (VAM) prior to 4.42.2. The issue is an authenticated SQL injection vulnerability in multiple parameters of the /monitor/s_normalizedtrans.php endpoint. Affected software: Selesta Visual Access Manager (VAM); vulnerable component: the /monitor/...
CVE-2023-42236
The CVE-2023-42236 issue affects Selesta Visual Access Manager (VAM) before version 4.42.2. Multiple sources describe an authenticated SQL Injection in the GET parameter of /common/ajaxfunction.php, caused by lack of input validation. Impact is shown as potential exposure of database data due to ...
CVE-2023-42239
CVE-2023-42239 affects Selesta Visual Access Manager (VAM) prior to version 4.42.2. Multiple connected sources confirm an authenticated SQL Injection vulnerability in POST parameters of the /vam/vam_ep.php endpoint. The issue arises from improper handling/validation of input, enabling an attacker...