grupposcai realgimm 1.1.37 vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows malicious users to read any file in the filesystem via supplying a crafted XML file.

Grupposcai Realgimm 1.1.37

9.8

CVSSv3

An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows malicious users to execute arbitrary code via uploading a crafted HTML file.

Grupposcai Realgimm 1.1.37

8.8

CVSSv3

An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows malicious users to execute arbitrary code via uploading a crafted file.

Grupposcai Realgimm 1.1.37

8.8

CVSSv3

An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows malicious users to obtain sensitive technical information via a crafted SQL query.

Grupposcai Realgimm 1.1.37

6.1

CVSSv3

Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow malicious users to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWS...

Grupposcai Realgimm 1.1.37

9.8

CVSSv3

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows malicious users to access the database and execute arbitrary commands via a crafted SQL query.

Grupposcai Realgimm 1.1.37

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook