CVE-2023-30330

SoftExpert Excellence Suite 2.x before 2.1.3 is affected by a Local File Inclusion in /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php. The issue arises from a PHP include via a base64-encoded path (managerPath), enabling reading arbitrary files and potential remote code execution t...

CVE-2023-33515

CVE-2023-33515 affects SoftExpert Excellence Suite version 2.1.9, with a reported Cross-Site Scripting (XSS) vulnerability exploitable via query screens. The issue is described across multiple sources as an XSS in SoftExpert Suite 2.1.9, and the commonly cited attack path involves input that is r...

CVE-2018-12977

CVE-2018-12977: A SQL injection vulnerability in SoftExpert Excellence Suite 2.0 allows remote authenticated users to pull information from the database via the cddocument parameter in the Downloading Electronic Documents section. The NVD metrics indicate CVSSv3.0 base score 8.8 (HIGH) with NETWO...