CVE-2019-15933

Intesync Solismed 3.3sp has SQL Injection.

CVE-2019-15932

Intesync Solismed 3.3sp has Incorrect Access Control.

CVE-2019-15934

Intesync Solismed 3.3sp has CSRF.

CVE-2019-15936

Intesync Solismed 3.3sp allows Insecure File Upload.

CVE-2019-15935

Intesync Solismed 3.3sp has XSS.

CVE-2019-16246

Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated code execution.

CVE-2019-15931

Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.

CVE-2019-17428

An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data stored within the database to be decrypted.

CVE-2019-15930

Intesync Solismed 3.3sp allows Clickjacking.