CVE-2024-30889

AudimexEE (audimexEE) vulnerable to Cross Site Scripting in versions prior to 15.1.3.9. CVE-2024-30889 allows a remote attacker to execute arbitrary code via parameters service, method, widget_type, request_id, and payload. The fixed version is 15.1.3.9 (or later). No exploitation status is provi...

CVE-2023-36361

CVE-2023-36361 affects Audimexee v14.1.7, with a SQL injection vulnerability exploitable through the p_table_name parameter. The root cause is improper handling/sanitization of the p_table_name input, enabling attackers to inject SQL commands. Documented impact is high confidentiality, integrity,...

CVE-2020-28047

AudimexEE before 14.1.1 is vulnerable to Reflected XSS. If the security parameter unique_error_numbers is not set, remote attackers can inject script/HTML via action, cargo, panel parameters, potentially causing data leakage. Affected product: AudimexEE; vulnerable component/entry points are the ...

CVE-2020-28115

AudimexEE’s CVE-2020-28115 is a SQL injection in the Documents component of version 14.1.0, exploitable via the object_path parameter. Multiple connected sources corroborate: CNVD-2020-65171 states the vulnerability exists in AudimexEE versions prior to 14.1.1, implying a fixed version is 14.1.1....

CVE-2023-39558

Summary: CVE-2023-39558 affects AudimexEE v15.0 with multiple reflected cross-site scripting (XSS) vulnerabilities in the Show Kai Data component. What is affected: AudimexEE version 15.0; vulnerable code path is the Show Kai Data component that reflects input back to the user. Impact (per source...

CVE-2023-39559

CVE-2023-39559 affects AudimexEE 15.0 and is described as a full path disclosure (path traversal) vulnerability. The available sources confirm the issue but do not provide a concrete root cause or affected components beyond AudimexEE 15.0; CVSS v3.1 base score is 5.3 (Medium) with Confidentiality...