Realgimm Security Vulnerabilities and Issues — Realgimm CVE List

Lucene search

GrupposcaiRealgimm

2 matches found

CVE•added 2023/08/31 2:15 p.m.•136 views

CVE-2023-41642

Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter.

6.1CVSS6AI score0.11613EPSS

In wild

CVE•added 2023/08/31 2:15 p.m.•98 views

CVE-2023-41635

A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via supplying a crafted XML file.

6.5CVSS6.2AI score0.00072EPSS