| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-4491 | 9.8 | Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version. The exploitation of this vulnerability could allow an attacker to send a very long username string to /searchbook.ghp, asking for the name via a POST request, resulting in arb | 2023-10-06 16:23:00 | 2023-10-04 13:15:00 |
| CVE-2023-4492 | 6.1 | Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, lastname, middlename, workaddress, workcity, workcountry, workphone, workstate and workzip) of the /addrbook.ghp file, allowing an attacker to | 2023-10-06 16:21:00 | 2023-10-04 13:15:00 |
| CVE-2023-4494 | 9.8 | Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long username string to the register.ghp file asking for the name via a GET request resulting in arbitrary code execution on the remote m | 2023-10-06 16:20:00 | 2023-10-04 13:15:00 |
| CVE-2023-4493 | 5.4 | Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the users_admin.ghp file that affects multiple parameters such as (firstname, homephone, lastname, lastname, middlename, workaddress, workcity, workcountry, workphone, w | 2023-10-06 16:20:00 | 2023-10-04 13:15:00 |
| CVE-2023-4495 | 6.1 | Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /registresult.htm (POST method), in the Resume parameter. The XSS is loaded from | 2023-10-06 16:19:00 | 2023-10-04 13:15:00 |
| CVE-2023-4496 | 6.1 | Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability stored via /body2.ghp (POST method), in the mtowho parameter. | 2023-10-06 16:18:00 | 2023-10-04 13:15:00 |
| CVE-2022-36276 | 9.8 | TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database. | 2023-10-06 16:17:00 | 2023-10-04 16:15:00 |
| CVE-2022-36277 | 6.1 | The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks. | 2023-10-06 16:16:00 | 2023-10-04 16:15:00 |
| CVE-2023-43838 | 7.8 | An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. | 2023-10-06 16:14:00 | 2023-10-04 16:15:00 |
| CVE-2023-39158 | 6.5 | Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Banner Management For WooCommerce plugin <= 2.4.2 versions. | 2023-10-06 15:39:00 | 2023-10-03 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: