CVE-2025-5179

The CVE-2025-5179 entry describes a cross-site scripting vulnerability in Realce Tecnologia Queue Ticket Kiosk up to 20250517. The flaw affects an unknown functionality in /adm/index.php of the Cadastro de Administrador Page, where manipulating the Name/Usuário parameter enables XSS. The issue is...

CVE-2025-5178

The CVE-2025-5178 entry concerns Realce Tecnologia Queue Ticket Kiosk, specifically the Image File Handler component. Affected is an unknown function in the file /adm/ajax.php where the files[] argument can be manipulated to achieve unrestricted upload, enabling remote exploitation. Public docume...

CVE-2025-5176

CVE-2025-5176 affects Realce Tecnologia Queue Ticket Kiosk (up to 20250517). The vulnerability is an SQL injection in the Admin Login Page, targeting the file /adm/index.php via the argument Usuário. Impact: high confidentiality/integrity risk per CVSS details; vector is network with low attack c...

CVE-2025-5177

The CVE-2025-5177 entry concerns Realce Tecnologia Queue Ticket Kiosk (Admin Login Page). Affected component is the Admin Login Page, specifically the /adm/index.php path, where manipulating the Usuário parameter enables a cross-site scripting vulnerability. The issue is described as remotely ini...