CVE-2024-48761

A Reflected Cross-Site Scripting (XSS) vulnerability exists in Celk Sistemas Celk Saude v.3.1.252.1 , a health sector management software. The flaw is caused by the improper validation or sanitization of the erro parameter, which is returned as a response when incorrect credentials are provided d...

CVE-2024-51182

The health sector management software Celk Sistemas Celk Saude v.3.1.252.1 is vulnerable to an HTML Injection vulnerability (CWE-79). A remote attacker can inject arbitrary HTML code via the "erro" parameter , potentially allowing them to manipulate webpage content. As of the latest reports, no p...

CVE-2024-55198

The Celk Sistemas Celk Saude health sector management software, specifically version 3.1.252.1 , is vulnerable to user enumeration due to discrepancies in error messages within the password recovery functionality . A remote attacker can exploit these inconsistent responses to identify valid users...

CVE-2024-55199

A Stored Cross-Site Scripting (XSS) vulnerability exists in Celk Sistemas Celk Saude v.3.1.252.1 , a health sector management software. An attacker can exploit the file upload feature to store malicious JavaScript code inside a PDF file . When a victim renders the file, the injected code executes...