Realgimm Security Vulnerabilities and Issues — Realgimm CVE List

Lucene search

GrupposcaiRealgimm

6 matches found

CVE•added 2023/08/31 2:15 p.m.•129 views

CVE-2023-41642

Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter.

6.1CVSS6AI score0.1281EPSS

CVE•added 2023/08/31 2:15 p.m.•97 views

CVE-2023-41635

A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via supplying a crafted XML file.

6.5CVSS6.2AI score0.00072EPSS

CVE•added 2023/08/31 2:15 p.m.•97 views

CVE-2023-41636

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query.

9.8CVSS9.7AI score0.00187EPSS

CVE•added 2023/08/31 2:15 p.m.•92 views

CVE-2023-41640

An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query.

8.8CVSS8.3AI score0.00104EPSS

CVE•added 2023/08/31 2:15 p.m.•87 views

CVE-2023-41637

An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file.

9.8CVSS9.4AI score0.00443EPSS

CVE•added 2023/08/31 2:15 p.m.•22 views

CVE-2023-41638

An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted file.

8.8CVSS8.8AI score0.00156EPSS