CVE-2024-36819

MAP-OS

CVE-2022-48326

Mapos 4.39.0 contains multiple Cross Site Scripting (XSS) vulnerabilities that can allow an attacker to execute arbitrary code. The CVE-2022-48326 entry is supported by connected sources detailing the affected product (Mapos 4.39.0), the root cause (XSS in numerous input parameters), and the scop...

CVE-2022-48324

CVE-2022-48324 affects Mapos version 4.39.0 and encompasses multiple XSS vulnerabilities affecting numerous input fields across modules (Arquivos.php, Clientes.php, Cobrancas.php, Financeiro.php, Garantias.php, Login.php). The root cause is improper handling/sanitization of user-supplied input, e...

CVE-2022-48325

Summary (CVE-2022-48325) : Multiple Cross Site Scripting (XSS) vulnerabilities affect Mapos 4.39.0, enabling arbitrary code execution per the cited entries. The flaws are linked to unsanitized user-controlled inputs across numerous parameters in Mapos/controllers (Mapos.php), Mine.php, and Os.php...

CVE-2022-48327

CVE-2022-48327 concerns Mapos 4.39.0 with multiple cross-site scripting (XSS) vulnerabilities in several input points. The vulnerability affects a wide set of parameters across PHP controllers and views, including: Relatorios.php, Servicos.php, Usuarios.php, Vendas.php, Lancamentos view, painel, ...

CVE-2024-35545

MAP-OS v4.45.0 and earlier contains a cross-site scripting (XSS) vulnerability. The issue affects MAP-OS versions up to 4.45.0; root cause details are not explicitly provided in the documents. The CVSS 3.1 base score is 6.1 (Medium) with network attack vector, user interaction required, and chang...