CVE-2024-36819

MAP-OS versions 4.45.0 and earlier are vulnerable to a Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. A malicious user can insert a payload into the Client Name input field. When a service order is created for that client, the payload executes ...

CVE-2022-48326

Mapos 4.39.0 contains multiple Cross Site Scripting (XSS) vulnerabilities that can allow an attacker to execute arbitrary code. The CVE-2022-48326 entry is supported by connected sources detailing the affected product (Mapos 4.39.0), the root cause (XSS in numerous input parameters), and the scop...

CVE-2022-48327

CVE-2022-48327 concerns Mapos 4.39.0 with multiple cross-site scripting (XSS) vulnerabilities in several input points. The vulnerability affects a wide set of parameters across PHP controllers and views, including: Relatorios.php, Servicos.php, Usuarios.php, Vendas.php, Lancamentos view, painel, ...

CVE-2022-48324

CVE-2022-48324 affects Mapos version 4.39.0 and encompasses multiple XSS vulnerabilities affecting numerous input fields across modules (Arquivos.php, Clientes.php, Cobrancas.php, Financeiro.php, Garantias.php, Login.php). The root cause is improper handling/sanitization of user-supplied input, e...

CVE-2024-35545

The service order control system MAP-OS (developed by Ramon Silva) version v4.45.0 and earlier is vulnerable to a cross-site scripting (XSS) flaw. This vulnerability occurs due to the improper neutralization of input during web page generation , which could allow an attacker to inject malicious s...

CVE-2022-48325

Summary (CVE-2022-48325) : Multiple Cross Site Scripting (XSS) vulnerabilities affect Mapos 4.39.0, enabling arbitrary code execution per the cited entries. The flaws are linked to unsanitized user-controlled inputs across numerous parameters in Mapos/controllers (Mapos.php), Mine.php, and Os.php...