CVE-2022-32409

The Portal do Software Publico Brasileiro i3geo v7.0.5 is vulnerable to a Local File Inclusion (LFI) vulnerability in the codemirror.php component. An attacker can exploit this by sending a crafted HTTP request to execute arbitrary PHP code , potentially allowing access to sensitive information s...

CVE-2022-34093

CVE-2022-34093 affects Software Publico Brasileiro i3geo v7.0.5. The connected documents confirm a cross-site scripting (XSS) vulnerability in access_token.php, allowing injection of malicious JavaScript that can run in users’ browsers and potentially steal session tokens or perform unauthorized ...

CVE-2022-34094

i3geo v7.0.5 has a cross-site scripting (XSS) flaw exposed via request_token.php . The connected nuclei template confirms the vulnerability and describes impact as attackers injecting JavaScript into parameters that run in users’ browsers (potential token/session risks). Remediation in the connec...

CVE-2022-34092

CVE-2022-34092 affects Portal do Software Publico Brasileiro i3geo v7.0.5 with a cross-site scripting (XSS) vulnerability via the svg2img.php component. The connected documents consistently describe the issue as an XSS condition stemming from svg2img.php, affecting i3geo 7.0.5, but do not provide...